CVE-2006-4794

State: Published
Severity: Not scored
Published: Sep 14, 2006
Updated: Aug 7, 2024
Reserved: Sep 14, 2006

Description

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the query string (PATH_INFO) in (1) contact.php, (2) download.php, (3) admin.php, (4) fpw.php, (5) news.php, (6) search.php, (7) signup.php, (8) submitnews.php, and (9) user.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

30982vdb-entry
30979vdb-entry
30987vdb-entry
30983vdb-entry
30984vdb-entry
30986vdb-entry
http://www.securityfocus.com/data/vulnerabilities/exploits/19997.html
30985vdb-entry
19997vdb-entry
30981vdb-entry
30980vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.