CVE-2006-5036

2006-09-27T23:07:00
ID CVE-2006-5036
Type cve
Reporter cve@mitre.org
Modified 2018-10-17T21:40:00

Description

DISPUTED MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via the sq_remote_page_url parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that "The vendor does not consider this a vulnerability."