CVE-2006-0168 Cross-site scripting (XSS) vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page.
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| myphpim | = 01.05 | No fix listed |
References
- evuln.com exploit vendor-advisory
- 18399 third-party-advisory vendor-advisory
- 22326 vdb-entry
- 20060111 [eVuln] MyPhPim Multiple SQL Injection and XSS Vulnerabilities mailing-list
- 16210 exploit vdb-entry
- ADV-2006-0147 vdb-entry
- myphpim-todo-xss(24071) vdb-entry