CVE-2006-5799 Multiple cross-site scripting (XSS) vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the (1) contid or (2) search parameters.
MediumCVSS 6.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the (1) contid or (2) search parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xenis.creator cms | All versions | No fix listed |
References
- 20061104 Xenis.creator CMS - Multiple Cross mailing-list
- 22716 third-party-advisory
- 1017162 vdb-entry vendor-advisory
- www.majorsecurity.de
- 20908 vdb-entry
- ADV-2006-4470 vdb-entry
- xeniscreatorcms-default-xss(30019) vdb-entry