CVE-2006-1106

State: Published
Severity: Not scored
Published: Mar 9, 2006
Updated: Aug 7, 2024
Reserved: Mar 9, 2006

Description

Cross-site scripting (XSS) vulnerability in Pixelpost 1.5 beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) message, (2) name, (3) url, and (4) email parameters when commenting on a post. NOTE: the vendor has disputed some issues from the original disclosure, but due to the vagueness of the dispute, it is not clear whether the vendor is disputing this particular issue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

pixelpost-functions-xss(25047)vdb-entry
http://forum.pixelpost.org/showthread.php?t=3535
http://www.neosecurityteam.net/index.php?action=advisories&id=19
20060304 Pixel Post Multiple Vulnerabilitiesmailing-list
16964vdb-entry
ADV-2006-0823vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.