6.8
CVSSv2

CVE-2006-1575

Published: 02/04/2006 Updated: 18/10/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in news.php in QLnews 1.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) autorx and (2) newsx parameters.

Vulnerable Product Search on Vulmon Subscribe to Product

vscripts.pl qlnews 1.2