CVE-2006-2892

EPSS 1.8%

Cross-site scripting (XSS) vulnerability in index.php in GANTTy 1.0.3 allows remote attackers to inject arbitrary HTML and web script via the message parameter in a login action.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/27982unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/20498 http://securityreason.com/securityalert/1060 https://exchange.xforce.ibmcloud.com/vulnerabilities/26963 http://www.securityfocus.com/archive/1/436125/100/0/threaded http://www.securityfocus.com/bid/18296 http://www.vupen.com/english/advisories/2006/2188