CVE-2006-1121

Cross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the query string to index.php.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-fr79-9p84-rq4r

Cross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject...

References (12)

• http://kapda.ir/advisory-277.html Vendor Advisory
• http://securityreason.com/securityalert/531
• http://securitytracker.com/id?1015726 Exploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/426759/100/0/threaded
• http://www.securityfocus.com/bid/16961 Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25052
• http://kapda.ir/advisory-277.html Vendor Advisory
• http://securityreason.com/securityalert/531
• http://securitytracker.com/id?1015726 Exploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/426759/100/0/threaded
• http://www.securityfocus.com/bid/16961 Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25052