Published: 10/11/2006 Updated: 17/10/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 705

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) topid, (2) forid, and (3) catid parameters to code/cp_forum_view.php; (4) choosed_language parameter to cp_dpage.php; (5) orderdir parameter to cp_links_search.php; (6) order_field parameter to (a) cp_show_ec_products.php and (b) cp_users_online.php; and the (7) signature and (8) fiscal code fields in the user profile.

Vulnerable Product	Search on Vulmon	Subscribe to Product
aiocp aiocp 1.3.000
aiocp aiocp 1.3.007
aiocp aiocp 1.3.003
aiocp aiocp 1.3.004
aiocp aiocp 1.3.001
aiocp aiocp 1.3.002
aiocp aiocp 1.3.005
aiocp aiocp 1.3.006

source: wwwsecurityfocuscom/bid/20931/info All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, exec ...

source: wwwsecurityfocuscom/bid/20931/info All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execut ...

source: wwwsecurityfocuscom/bid/20931/info All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute ar ...

source: wwwsecurityfocuscom/bid/20931/info All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute ...

source: wwwsecurityfocuscom/bid/20931/info All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, ex ...

NVD-CWE-Other http://www.securityfocus.com/bid/20931 http://secunia.com/advisories/22719 http://sourceforge.net/project/shownotes.php?release_id=478370 http://securityreason.com/securityalert/1839 http://www.vupen.com/english/advisories/2006/4378 https://exchange.xforce.ibmcloud.com/vulnerabilities/30048 https://exchange.xforce.ibmcloud.com/vulnerabilities/30045 http://www.securityfocus.com/archive/1/450701/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/28920/

CVE-2006-5830

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect