| Reporter | Title | Published | Views | Family All 4 |
|---|---|---|---|---|
 | CVE-2006-4881 | 19 Sep 200621:00 | – | cvelist |
 | PHP-post Web Forum 0.x.1.0 - 'pm.php?replyuser' Cross-Site Scripting | 16 Sep 200600:00 | – | exploitdb |
 | EUVD-2006-4868 | 7 Oct 202500:30 | – | euvd |
 | CVE-2006-4881 | 19 Sep 200621:07 | – | nvd |
Node
| Source | Link |
|---|---|
| osvdb | www.osvdb.org/28968 |
| securityreason | www.securityreason.com/securityalert/1607 |
| osvdb | www.osvdb.org/28972 |
| vupen | www.vupen.com/english/advisories/2006/3688 |
| securityfocus | www.securityfocus.com/archive/1/446318/100/0/threaded |
| osvdb | www.osvdb.org/28970 |
| exchange | www.exchange.xforce.ibmcloud.com/vulnerabilities/29017 |
| securityfocus | www.securityfocus.com/bid/20061 |
| secunia | www.secunia.com/advisories/22014 |
| osvdb | www.osvdb.org/28971 |
10
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| replyuser | query param | /pm.php | Reflected XSS via replyuser parameter in pm.php | CWE-79 |
| txt_jumpto | query param | /dropdown.php | Reflected XSS via txt_jumpto parameter in dropdown.php | CWE-79 |
| txt_error | query param | /template.php | Reflected XSS via txt_error and txt_templatenotexist parameters in template.php | CWE-79 |
| txt_templatenotexist | query param | /template.php | Reflected XSS via txt_error and txt_templatenotexist parameters in template.php | CWE-79 |
| split | query param | /editprofile.php | Reflected XSS via split parameter in editprofile.php | CWE-79 |
| split | query param | /search.php | Reflected XSS via split parameter in search.php | CWE-79 |
| split | query param | /index.php | Reflected XSS via split parameter in index.php | CWE-79 |
| split | query param | /pm.php | Reflected XSS via split parameter in pm.php | CWE-79 |
| txt_login | query param | /loginline.php | Reflected XSS via txt_login parameter in loginline.php | CWE-79 |
| txt_logout | query param | /loginline.php | Reflected XSS via txt_logout parameter in loginline.php | CWE-79 |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jun 2026 22:29Current
5.7Medium risk
Vulners AI Score5.7
CVSS 24.3
EPSS0.0454