CVE-2006-2687

CVE-2006-2687

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject arbitrary web script or HTML via the email address (useremail parameter).

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/20305 http://securityreason.com/securityalert/995 https://exchange.xforce.ibmcloud.com/vulnerabilities/26703 http://www.securityfocus.com/archive/1/435134 http://www.securityfocus.com/bid/18127 http://www.vupen.com/english/advisories/2006/2020