CVE-2006-2367

CVE-2006-2367

EPSS 1.4%

Cross-site scripting (XSS) vulnerability in index.php in Clansys (aka Clanpage System) 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the func parameter in a search function.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://archives.neohapsis.com/archives/bugtraq/2006-04/0238.html http://secunia.com/advisories/19609 http://securityreason.com/securityalert/892 http://securitytracker.com/id?1015934 https://exchange.xforce.ibmcloud.com/vulnerabilities/25783 http://soot.shabgard.org/bugs/Clansys.txt