CVE-2006-5560

Cross-site scripting XSS vulnerability in heading.php in Boesch ProgSys 0.151 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/index.php, and unspecified vectors related to certain other files. NOTE: some of these details are obtained from third...

CVE-2006-5560

CVE-2006-5560 is a cross-site scripting vulnerability in Boesch ProgSys 0.151 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to admin/index.php and related files. CVSS v2.0 base score 4.3 (Medium): Network access, no authentication, partial inte...