3 matches found
CVE-2006-1970
CVE-2006-1970 denotes a cross-site scripting (XSS) vulnerability in the classifieds/viewcat.cgi component of KCScripts Classifieds, distributed standalone and as part of Portal Pack 6.0 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter....
CVE-2006-1965: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 onuser, 2 pass, 3 chatsys, 4 room, 5 username, and 6 to parameters in a sendim.cgi; the 7 username parameter in b imessage.cgi; the...
CVE-2006-1970: Undefined Security Weakness
Cross-site scripting XSS vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the catid parameter...