CVE-2006-2687

CVE-2006-2687

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject arbitrary web script or HTML via the email address (useremail parameter).

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://secunia.com/advisories/20305 http://securityreason.com/securityalert/995 https://exchange.xforce.ibmcloud.com/vulnerabilities/26703 http://www.securityfocus.com/archive/1/435134 http://www.securityfocus.com/bid/18127 http://www.vupen.com/english/advisories/2006/2020