Vulnerabilities > CVE-2006-4988 - Input Validation vulnerability in Patrick Michaelis Wili-Cms 0.1.1

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
patrick-michaelis
exploit available
NVD
Published: 2006-09-26
Updated: 2018-10-17

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbitrary web script or HTML via (1) the query string to relocate.php, (2) the globals[pageid] parameter in example-view/inc/print_button.php, and other unspecified vectors.

Vulnerable Configurations

Part Description Count
Application
Patrick_Michaelis
1

Exploit-Db

descriptionWili-CMS <= 0.1.1 (include/xss/full path) Remote Vulnerabilities. CVE-2006-4987,CVE-2006-4988,CVE-2006-4989. Webapps exploit for php platform
idEDB-ID:2414
last seen2016-01-31
modified2006-09-21
published2006-09-21
reporterHACKERS PAL
sourcehttps://www.exploit-db.com/download/2414/
titleWili-CMS <= 0.1.1 include/xss/full path Remote Vulnerabilities

References