CVE-2006-2803 Multiple cross-site scripting (XSS) vulnerabilities in PHP ManualMaker 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) id parameter to index.php, (2) search field (possi...
MediumCVSS 6.8
EPSS 2.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP ManualMaker 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) id parameter to index.php, (2) search field (possibly the s parameter), or (3) comment field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| deltascripts php manualmaker | = 1.0 | No fix listed |
References
- 20453 third-party-advisory vendor-advisory
- 1024 third-party-advisory
- 20060602 PHP ManualMaker v1.0 mailing-list
- 18244 exploit vdb-entry
- ADV-2006-2138 vdb-entry vendor-advisory
- phpmanualmaker-multiple-xss(26926) vdb-entry