6.8
CVSSv2

CVE-2006-6929

Published: 13/01/2007 Updated: 14/02/2024
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 700
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in Rapid Classified 3.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) id parameter to (a) reply.asp or (b) view_print.asp, the (2) SH1 parameter to (c) search.asp, the (3) name parameter to reply.asp, or the (4) dosearch parameter to (d) advsearch.asp.

Vulnerable Product Search on Vulmon Subscribe to Product

ga soft rapid classified 3.1

Exploits

source: wwwsecurityfocuscom/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input A successful exploit of these vulnerabilities could allow an attacker to compromise ...
source: wwwsecurityfocuscom/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input A successful exploit of these vulnerabilities could allow an attacker to compromis ...
source: wwwsecurityfocuscom/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input A successful exploit of these vulnerabilities could allow an attacker to comprom ...
source: wwwsecurityfocuscom/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input A successful exploit of these vulnerabilities could allow an attacker to compr ...