Vulnerabilities > CVE-2006-7072 - Unspecified vulnerability in Geodesicsolutions Geoclassifieds Enterprise 2.0.5.0/2.0.5.1/2.0.5.2

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
geodesicsolutions
exploit available
NVD
Published: 2007-03-02
Updated: 2024-11-21

Summary

Cross-site scripting (XSS) vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to inject arbitrary web script and HTML via the (1) b[username] and (2) c parameters to (a) index.php, the b[username] parameter to (b) admin/index.php, and (3) c[phone] parameter to register.php.

Vulnerable Configurations

Part Description Count
Application
Geodesicsolutions
3

Exploit-Db

descriptionGeoClassifieds Enterprise 2.0.5.x Index.PHP Multiple Cross-Site Scripting Vulnerabilities. CVE-2006-7072. Webapps exploit for php platform
idEDB-ID:28292
last seen2016-02-03
modified2006-07-27
published2006-07-27
reporterEllipSiS Security
sourcehttps://www.exploit-db.com/download/28292/
titleGeoClassifieds Enterprise 2.0.5.x Index.PHP Multiple Cross-Site Scripting Vulnerabilities

References