CVE-2006-0093

CVE-2006-0093 describes a Cross-site Scripting (XSS) vulnerability in index.php of @Card ME PHP. The issue allows remote attackers to inject arbitrary web script or HTML via the cat parameter. According to the NVD entry, the flaw has a CVSS v2 base score of 4.3 (Medium) with network access and no...

CVE-2006-0093: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...