CVE-2006-6768

EPSS 1.7%

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) main parameter.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/29141unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/23289 http://securityreason.com/securityalert/2075 https://exchange.xforce.ibmcloud.com/vulnerabilities/30445 http://www.securityfocus.com/archive/1/452194/100/200/threaded http://www.securityfocus.com/bid/21198