CVE-2006-3061
- State
- Published
- Severity
- Not scored
- Published
- Jun 19, 2006
- Updated
- Aug 7, 2024
- Reserved
- Jun 19, 2006
Description
Multiple cross-site scripting (XSS) vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web script or HTML via the (1) sort parameter in index2.php, (2) item_id parameter in report.php, (3) search_term parameter (aka the "search box") in search_reviews.php, (4) the profile field in usercp/profile_edit1.php, and the (5) review field in review_form.php.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20613third-party-advisory
- ADV-2006-2346vdb-entry
- 26499vdb-entry
- 1107third-party-advisory
- fivestarreview-index2-xss(27188)vdb-entry
- 18390vdb-entry
- fivestarreview-report-xss(27189)vdb-entry
- 26497vdb-entry
- fivestarreview-profile-xss(27192)vdb-entry
- 26498vdb-entry
- fivestarreview-searchreviews-xss(27190)vdb-entry
- 20060611 5 Star Review - review-script.com - XSS w/ cookie outputmailing-list
- 26496vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.