CVE-2006-2368

CVE-2006-2368 is an XSS vulnerability in Clansys (aka Clanpage System) 1.1, exploitable via the page parameter in index.php. The vulnerability permits remote attackers to inject arbitrary script/HTML. From the supplied sources (NVD/NIST), the attack vector is network-based with no authentication,...

CVE-2006-2367

CVE-2006-2367 is a cross-site scripting (XSS) vulnerability in Clansys (Clanpage System) versions 1.0 and 1.1. The flaw resides in index.php where the search function passes a user-controlled func parameter, enabling remote attackers to inject arbitrary web script or HTML. The published entries c...