CVE-2006-1968 Cross-site scripting (XSS) vulnerability in news/NsVisitor.cgi in KCScripts News Publisher, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbit...
MediumCVSS 5.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in news/NsVisitor.cgi in KCScripts News Publisher, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sort_order parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kcscripts news publisher | = 6.0 | No fix listed |
| kcscripts portal pack | = 6.0 | No fix listed |
References
- pridels0.blogspot.com
- 19695 third-party-advisory vendor-advisory
- 24762 vdb-entry
- 17628 vdb-entry
- ADV-2006-1440 vdb-entry
- portalpack-multiple-xss(25940) vdb-entry