Published: 28/03/2006 Updated: 20/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) action, (2) id, (3) num, (4) board, (5) cat, (6) real, (7) viewcat, (8) img, or (9) curcatname parameter in cgi-bin/index.cgi, or (10) vsSD parameter in /mods/calendar/index.cgi.

Vulnerable Product	Search on Vulmon	Subscribe to Product
web-app.org webapp 0.9.9.3.2
web-app.org webapp 0.9.9.1
web-app.org webapp 0.9.9.2
web-app.org webapp 0.9.9.2.1
web-app.org webapp 0.9.9.3
web-app.org webapp 0.9.9.3.1

source: wwwsecurityfocuscom/bid/17359/info Web-AppOrg and Web-AppNet are prone to multiple cross-site scripting vulnerabilities because the applications fail to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affe ...

source: wwwsecurityfocuscom/bid/17359/info Web-AppOrg and Web-AppNet are prone to multiple cross-site scripting vulnerabilities because the applications fail to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the af ...

NVD-CWE-Other http://www.osvdb.org/24278 http://www.osvdb.org/24279 http://www.securityfocus.com/bid/17359 http://secunia.com/advisories/19506 http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1 http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1 http://pridels0.blogspot.com/2006/03/webapp-multiple-xss-vuln.html http://www.vupen.com/english/advisories/2006/1102 https://exchange.xforce.ibmcloud.com/vulnerabilities/25435 https://nvd.nist.gov https://www.exploit-db.com/exploits/27561/

CVE-2006-1427

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect