CVE-2006-2174

CVE-2006-2174 concerns multiple cross-site scripting (XSS) vulnerabilities in VHCS’s admin/server_day_stats.php. The issue allows remote attackers to inject arbitrary web script or HTML by supplying one of three parameters: day, month, or year. This is documented across multiple sources (NVD, CVE...

CVE-2006-2174: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in admin/serverdaystats.php in Virtual Hosting Control System VHCS allow remote attackers to inject arbitrary web script or HTML via the 1 day, 2 month, or 3 year parameter...