Vulnerabilities > CVE-2006-4960 - Input Validation vulnerability in PHPBlueDragon CMS

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
blue-dragon
exploit available
NVD
Published: 2006-09-23
Updated: 2017-10-19

Summary

Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter, which is reflected in an error message resulting from a failed SQL query.

Vulnerable Configurations

Part Description Count
Application
Blue_Dragon
2

Exploit-Db

descriptionPhp Blue Dragon CMS <= 2.9.1 (XSS/SQL) Code Execution Exploit. CVE-2006-4960,CVE-2006-4961,CVE-2006-4962. Webapps exploit for php platform
fileexploits/php/webapps/2402.php
idEDB-ID:2402
last seen2016-01-31
modified2006-09-20
platformphp
port
published2006-09-20
reporterKacper
sourcehttps://www.exploit-db.com/download/2402/
titlePhp Blue Dragon CMS <= 2.9.1 XSS/SQL Code Execution Exploit
typewebapps

References