2 matches found
CVE-2006-3138
Multiple cross-site scripting XSS vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PIC parameter in offers-pix.php, 2 from parameter in cp/index.php, and 3 action parameter in cp/adminindex.php...
4.3CVSS5.8AI score0.02088EPSS
SaveExploits0References8
CVE-2006-3138: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PIC parameter in offers-pix.php, 2 from parameter in cp/index.php, and 3 action parameter in cp/adminindex.php...
4.3CVSS5.9AI score0.02088EPSS
SaveExploits0References2
20