CVE-2006-1556

CVE-2006-1556 affects AL-Caricatier 2.5, specifically the view_caricatier.php component. The issue is multiple cross-site scripting (XSS) vulnerabilities exploitable via the CatName, CaricatierID, or CatID parameters, enabling remote attackers to inject arbitrary script/HTML. The provided sources...

CVE-2006-1556: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in viewcaricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 CatName, 2 CaricatierID, or 3 CatID parameter...

CVE-2005-4653: Undefined Security Weakness

Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote attackers to bypass login authentication by requesting viewcaricatier.php, and then requesting any file in the admin directory with a cookieusername=admin argument...