Vulnerabilities > CVE-2006-7072 - Cross-Site Scripting vulnerability in Geodesicsolutions Geoclassifieds Enterprise 2.0.5.0/2.0.5.1/2.0.5.2

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
geodesicsolutions
exploit available
NVD
Published: 2007-03-02
Updated: 2018-10-16

Summary

Cross-site scripting (XSS) vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to inject arbitrary web script and HTML via the (1) b[username] and (2) c parameters to (a) index.php, the b[username] parameter to (b) admin/index.php, and (3) c[phone] parameter to register.php.

Vulnerable Configurations

Part Description Count
Application
Geodesicsolutions
3

Exploit-Db

descriptionGeoClassifieds Enterprise 2.0.5.x Index.PHP Multiple Cross-Site Scripting Vulnerabilities. CVE-2006-7072. Webapps exploit for php platform
idEDB-ID:28292
last seen2016-02-03
modified2006-07-27
published2006-07-27
reporterEllipSiS Security
sourcehttps://www.exploit-db.com/download/28292/
titleGeoClassifieds Enterprise 2.0.5.x Index.PHP Multiple Cross-Site Scripting Vulnerabilities

References