CVE-2006-4528 Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) recherche parameter in recherchemembre.php and the (2) e...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) recherche parameter in recherchemembre.php and the (2) email parameter in test.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| membrepass | = 1.5 | No fix listed |
References
- acid-root.new.fr
- 21715 third-party-advisory vendor-advisory
- 1487 third-party-advisory
- 20060831 Membrepass v1.5 Php code execution, Xss, Sql Injection mailing-list
- 19789 vdb-entry
- ADV-2006-3427 vdb-entry
- membrepass-test-xss(28691) vdb-entry