CVE-2006-1435

CVE-2006-1435

EPSS 1.3%

Cross-site scripting (XSS) vulnerability in genmessage.php in Accounting Receiving and Inventory Administration (ARIA) 0.99-6 allows remote attackers to inject arbitrary web script or HTML via the Message Field (message parameter).

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/ref/24/24255-aria.txt http://secunia.com/advisories/19551 https://exchange.xforce.ibmcloud.com/vulnerabilities/25688 http://www.osvdb.org/24255 http://www.securityfocus.com/bid/17411