4.3
CVSSv2

CVE-2006-2883

Published: 07/06/2006 Updated: 18/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in search.php in Kmita FAQ 1.0 allows remote malicious users to inject arbitrary web script or HTML via the q parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

kke info media kmita faq 1.0

Exploits

source: wwwsecurityfocuscom/bid/18282/info Kmita FAQ is prone to multiple input-validation vulnerabilities The issues include cross-site scripting and SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input A successful exploit of these vulnerabilities could allow an ...