CVE-2006-0175 Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
MediumCVSS 4.3
EPSS 3.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webwiz web wiz forums | = 6.34 | No fix listed |
References
- 20060109 Advisory:XSS vulnerability on WebWiz Forums <= 6.34 (search_form.asp) exploit mailing-list
- 22398 vdb-entry
- 20060111 Advisory:XSS vulnerability on WebWiz Forums <= 6.34(search_form.asp) mailing-list
- 16196 exploit patch vdb-entry
- webwizforums-searchform-xss(24048) vdb-entry