CVE-2006-2367

2006-05-1516:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.5%

JSON

Cross-site scripting (XSS) vulnerability in index.php in Clansys (aka Clanpage System) 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the func parameter in a search function.

References

archives.neohapsis.com/archives/bugtraq/2006-04/0238.html

secunia.com/advisories/19609

securityreason.com/securityalert/892

securitytracker.com/id?1015934

soot.shabgard.org/bugs/Clansys.txt

exchange.xforce.ibmcloud.com/vulnerabilities/25783