NVD

Id
61431  
Name
CVE-2006-2746  
Description
Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in index.php, and the (2) mytheme and (3) myskin parameters in multiple "p-themes" index.inc.php files including (c) lowgraphic, (d) classic, (e) puzzle, (f) simple, and (g) ciao. NOTE: vectors 2 and 3 might be resultant from file inclusion issues.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-01  
Modified Date
2011-03-07  
Seq
2006-2746  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317436 61431 CVE-2006-2746 1010  View
317437 61431 CVE-2006-2746 http://www.nukedx.com/?getxpl=35  View
317438 61431 CVE-2006-2746 http://www.nukedx.com/?viewdoc=35  View
317439 61431 CVE-2006-2746 20060528 Advisory: F@cile Interactive Web <= 0.8x Multiple RemoteVulnerabilities.  View
317440 61431 CVE-2006-2746 18151  View
317441 61431 CVE-2006-2746 ADV-2006-2036  View

Related JVN