{"id": "CVE-2006-1575", "bulletinFamily": "NVD", "title": "CVE-2006-1575", "description": "Multiple cross-site scripting (XSS) vulnerabilities in news.php in QLnews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorx and (2) newsx parameters.", "published": "2006-04-02T21:04:00", "modified": "2018-10-18T16:33:00", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-1575", "reporter": "cve@mitre.org", "references": ["http://evuln.com/vulns/113/description.html", "http://securityreason.com/securityalert/699", "http://www.securityfocus.com/archive/1/430741/100/0/threaded", "http://www.securityfocus.com/bid/17335", "https://exchange.xforce.ibmcloud.com/vulnerabilities/25546", "http://www.osvdb.org/24290", "http://secunia.com/advisories/19479"], "cvelist": ["CVE-2006-1575"], "type": "cve", "lastseen": "2019-05-29T18:08:31", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "a281a849d272bcedfe8d8a15428226c0"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "a8730b53b36aedc40b264c55fa5c3408"}, {"key": "cpe23", "hash": "60ab8f8fab98b4c23709c70f2973d523"}, {"key": "cvelist", "hash": "d6fca805bfef5157872b0c85bc073064"}, {"key": "cvss", "hash": "4cac367be6dd8242802053610be9dee6"}, {"key": "cvss2", "hash": "1997a83d1164e580c617572d7a8583e2"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "78a7a5cbaf09985c14389298e454e7db"}, {"key": "description", "hash": "4f11271bdab8bab8b16fb99cd4d032a4"}, {"key": "href", "hash": "077efd33886bcae20cc9a696c5686fec"}, {"key": "modified", "hash": "b181a1bd0de1710113718ee2e1a20265"}, {"key": "published", "hash": "569a24242750b8486351447d8919f81f"}, {"key": "references", "hash": "178a4d707997ff4b366acdbdd1f571c7"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "45953cdfbc74442aee145fce2f3662c5"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "f4b48011c356aaba468846c2c9e717bcd2f81d716d71fc733a17dfe94f8f47ce", "viewCount": 0, "enchantments": {"dependencies": {"references": [{"type": "osvdb", "idList": ["OSVDB:24290"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:12187"]}], "modified": "2019-05-29T18:08:31"}, "score": {"value": 5.2, "vector": "NONE", "modified": "2019-05-29T18:08:31"}, "vulnersScore": 5.2}, "objectVersion": "1.3", "cpe": ["cpe:/a:vscripts.pl:qlnews:1.2"], "affectedSoftware": [{"name": "vscripts.pl qlnews", "operator": "eq", "version": "1.2"}], "cvss2": {"cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:a:vscripts.pl:qlnews:1.2:*:*:*:*:*:*:*"], "cwe": ["NVD-CWE-Other"]}

{"osvdb": [{"lastseen": "2017-04-28T13:20:21", "bulletinFamily": "software", "description": "## Vulnerability Description\nQLnews contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'autorx' and 'newsx' variables upon submission to the news.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nQLnews contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'autorx' and 'newsx' variables upon submission to the news.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.\n## References:\nVendor URL: http://www.vscripts.pl/\n[Secunia Advisory ID:19479](https://secuniaresearch.flexerasoftware.com/advisories/19479/)\n[Related OSVDB ID: 24291](https://vulners.com/osvdb/OSVDB:24291)\nOther Advisory URL: http://evuln.com/vulns/113/summary.html\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-04/0230.html\nKeyword: EV0113\nISS X-Force ID: 25546\n[CVE-2006-1575](https://vulners.com/cve/CVE-2006-1575)\nBugtraq ID: 17335\n", "modified": "2006-03-30T02:02:35", "published": "2006-03-30T02:02:35", "href": "https://vulners.com/osvdb/OSVDB:24290", "id": "OSVDB:24290", "type": "osvdb", "title": "QLnews news.php Multiple Variable XSS", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "securityvulns": [{"lastseen": "2018-08-31T11:10:17", "bulletinFamily": "software", "description": "New eVuln Advisory:\r\nQLnews XSS and PHP Code Insertion Vulnerabilities\r\nhttp://evuln.com/vulns/113/summary.html\r\n\r\n--------------------Summary----------------\r\neVuln ID: EV0113\r\nCVE: CVE-2006-1575 CVE-2006-1576\r\nSoftware: QLnews\r\nSowtware's Web Site: http://www.vscripts.pl/\r\nVersions: 1.2\r\nCritical Level: Dangerous\r\nType: Multiple Vulnerabilities\r\nClass: Remote\r\nStatus: Unpatched. No reply from developer(s)\r\nPoC/Exploit: Available\r\nSolution: Not Available\r\nDiscovered by: Aliaksandr Hartsuyeu (eVuln.com)\r\n\r\n-----------------Description---------------\r\n1. Cross-Site Scripting.\r\n\r\nVulnerable Script: news.php\r\n\r\nParameters autorx, newsx are not properly sanitized. This can be used to post arbitrary HTML or web script code.\r\n\r\n\r\n2. PHP Code Insertion.\r\n\r\nAdministrator has an ability to edit variable values in config.php file. This can be used to insert arbitrary PHP code into config file which executes by every php-script.\r\n\r\nSystem access is possible.\r\n\r\nCondition: magic_quotes_gpc = off\r\n\r\n\r\n--------------PoC/Exploit----------------------\r\nAvailable at: http://evuln.com/vulns/113/exploit.html\r\n\r\n--------------Solution---------------------\r\nNo Patch available.\r\n\r\n--------------Credit-----------------------\r\nDiscovered by: Aliaksandr Hartsuyeu (eVuln.com)\r\n\r\n\r\nRegards,\r\nAliaksandr Hartsuyeu\r\nhttp://evuln.com - Penetration Testing Services\r\n.", "modified": "2006-04-12T00:00:00", "published": "2006-04-12T00:00:00", "id": "SECURITYVULNS:DOC:12187", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:12187", "title": "[eVuln] QLnews XSS and PHP Code Insertion Vulnerabilities", "type": "securityvulns", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}