CVE-2006-1496 - Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call

Published Mar 30, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.91%

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://secunia.com/advisories/19403
third-party-advisoryx_refsource_SECUNIA
http://www.attrition.org/pipermail/vim/2006-March/000650.html
mailing-listx_refsource_VIM
http://www.attrition.org/pipermail/vim/2006-March/000651.html
mailing-listx_refsource_VIM
http://www.securityfocus.com/archive/1/428737
mailing-listx_refsource_BUGTRAQExploit
http://www.securityfocus.com/bid/17226
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1500
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25483
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/19403		third-party-advisoryx_refsource_SECUNIA
http://www.attrition.org/pipermail/vim/2006-March/000650.html		mailing-listx_refsource_VIM
http://www.attrition.org/pipermail/vim/2006-March/000651.html		mailing-listx_refsource_VIM
http://www.securityfocus.com/archive/1/428737		mailing-listx_refsource_BUGTRAQExploit
http://www.securityfocus.com/bid/17226		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1500		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25483		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 30, 2006

Updated Aug 7, 2024

Reserved Mar 29, 2006

Link CVE-2006-1496

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-1496

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 30, 2006

Updated Aug 7, 2024

Link EUVD-2006-1500

GitHub

No data