CVE-2006-1965
CVE-2006-1965
Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) onuser, (2) pass, (3) chatsys, (4) room, (5) username, and (6) to parameters in (a) sendim.cgi; the (7) username parameter in (b) imessage.cgi; the (8) password parameter in (c) login.cgi; and the (9) cat_id parameter in (d) viewcat.cgi.
Productos afectados
n/a · n/aPoCs públicas encontradas — 3
exploitdbwww.exploit-db.com/exploits/27696no verificadoexploitdbwww.exploit-db.com/exploits/27697no verificadoexploitdbwww.exploit-db.com/exploits/27695no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
http://pridels0.blogspot.com/2006/04/net-clubs-pro-xss-vuln.htmlhttp://secunia.com/advisories/19651https://exchange.xforce.ibmcloud.com/vulnerabilities/25957http://www.osvdb.org/24754http://www.osvdb.org/24755http://www.osvdb.org/24756http://www.osvdb.org/24757http://www.securityfocus.com/bid/17622http://www.vupen.com/english/advisories/2006/1436