Vulnerabilities > CVE-2006-4988 - Unspecified vulnerability in Patrick Michaelis Wili-Cms 0.1.1

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
patrick-michaelis
exploit available
NVD
Published: 2006-09-26
Updated: 2024-11-21

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbitrary web script or HTML via (1) the query string to relocate.php, (2) the globals[pageid] parameter in example-view/inc/print_button.php, and other unspecified vectors.

Vulnerable Configurations

Part Description Count
Application
Patrick_Michaelis
1

Exploit-Db

descriptionWili-CMS <= 0.1.1 (include/xss/full path) Remote Vulnerabilities. CVE-2006-4987,CVE-2006-4988,CVE-2006-4989. Webapps exploit for php platform
idEDB-ID:2414
last seen2016-01-31
modified2006-09-21
published2006-09-21
reporterHACKERS PAL
sourcehttps://www.exploit-db.com/download/2414/
titleWili-CMS <= 0.1.1 include/xss/full path Remote Vulnerabilities

References