CVE-2006-5293 Cross-site scripting (XSS) vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the frommethod parameter.
MediumCVSS 6.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the frommethod parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpoutsourcing noahs classifieds | <= 1.3 | No fix listed |
References
- 1724 third-party-advisory
- 20061010 Noah's Classifieds Cross Site Scripting Vulnerability mailing-list
- 20463 vdb-entry vendor-advisory
- zone14.free.fr patch vendor-advisory
- noahs-classified-frommethod-xss(29448) vdb-entry