CVE-2006-3191 Cross-site scripting (XSS) vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web script or HTML via the pageid parameter.
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web script or HTML via the pageid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tpvgames mpcs | = 0.2 | No fix listed |
References
- 1130 third-party-advisory
- tpvgames.co.uk patch
- 20060617 MPCS v0.2 - XSS mailing-list
- 18470 exploit vdb-entry
- mpcs-comment-xss(27286) vdb-entry