CVE-2006-1486 - Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in realestateZONE 4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) bamin, (2) bemin, (3) pmin, and (4) state parameters

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in realestateZONE 4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) bamin, (2) bemin, (3) pmin, and (4) state parameters

Published Mar 29, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 3.88%

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in realestateZONE 4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) bamin, (2) bemin, (3) pmin, and (4) state parameters.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://pridels0.blogspot.com/2006/03/realestatezone-42-multiple-xss-vuln.html
x_refsource_MISC
http://secunia.com/advisories/19429
third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://www.osvdb.org/24186
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17277
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/1128
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1490
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25487
vdb-entryx_refsource_XF

Link	Providers	Tags
http://pridels0.blogspot.com/2006/03/realestatezone-42-multiple-xss-vuln.html		x_refsource_MISC
http://secunia.com/advisories/19429		third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://www.osvdb.org/24186		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17277		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/1128		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1490		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25487		vdb-entryx_refsource_XF