NVD

Id
60106  
Name
CVE-2006-1397  
Description
Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or (2) certain parameters to the login form.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-03-28  
Modified Date
2011-03-07  
Seq
2006-1397  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
309421 60106 CVE-2006-1397 http://phpadsnew.com/two/nucleus/index.php?itemid=46  View
309422 60106 CVE-2006-1397 633  View
309423 60106 CVE-2006-1397 1015828  View
309424 60106 CVE-2006-1397 1015829  View
309425 60106 CVE-2006-1397 http://sourceforge.net/project/shownotes.php?release_id=404963  View
309426 60106 CVE-2006-1397 http://sourceforge.net/project/shownotes.php?release_id=404964  View
309427 60106 CVE-2006-1397 20060327 [PHPADSNEW-SA-2006-001] phpAdsNew and phpPgAds 2.0.8 fix multiple vulnerabilities  View
309428 60106 CVE-2006-1397 17251  View
309429 60106 CVE-2006-1397 ADV-2006-1107  View
309430 60106 CVE-2006-1397 phpadsnew-login-banner-xss(25458)  View

Related JVN