CVE-2006-0493 - Cross-site scripting (XSS) vulnerability in MG2 (formerly known as Minigal) 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in MG2 (formerly known as Minigal) 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture

Published Feb 1, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.18%

Description

Cross-site scripting (XSS) vulnerability in MG2 (formerly known as Minigal) 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://secunia.com/advisories/17374
third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/389
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/423477/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16428
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0500
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24378
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/17374		third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/389		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/423477/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16428		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0500		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24378		vdb-entryx_refsource_XF