MEDIUM
Cross-site scripting (XSS) vulnerability in index.php in Chucky A
Published Apr 7, 2006
4.3
MEDIUMCVSS 2.0
EPSS 1.41%
Description
Cross-site scripting (XSS) vulnerability in index.php in Chucky A. Ivey N.T. 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter, which is not filtered when the administrator views the "Login Log" page.
Affected products
No data.
- 1.1.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (9)
- http://evuln.com/vulns/121/summary.html x_refsource_MISC
- http://secunia.com/advisories/19526 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://securityreason.com/securityalert/741 third-party-advisoryx_refsource_SREASON
- http://www.osvdb.org/24397 vdb-entryx_refsource_OSVDB
- http://www.securityfocus.com/archive/1/431344/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/17387 vdb-entryx_refsource_BID
- http://www.vupen.com/english/advisories/2006/1243 vdb-entryx_refsource_VUPEN
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1658 Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25638 vdb-entryx_refsource_XF
| Link | Providers | Tags |
|---|---|---|
| http://evuln.com/vulns/121/summary.html | x_refsource_MISC | |
| http://secunia.com/advisories/19526 | third-party-advisoryx_refsource_SECUNIAVendor Advisory | |
| http://securityreason.com/securityalert/741 | third-party-advisoryx_refsource_SREASON | |
| http://www.osvdb.org/24397 | vdb-entryx_refsource_OSVDB | |
| http://www.securityfocus.com/archive/1/431344/100/0/threaded | mailing-listx_refsource_BUGTRAQ | |
| http://www.securityfocus.com/bid/17387 | vdb-entryx_refsource_BID | |
| http://www.vupen.com/english/advisories/2006/1243 | vdb-entryx_refsource_VUPEN | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1658 | Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/25638 | vdb-entryx_refsource_XF |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 7, 2006
Updated Aug 7, 2024
Reserved Apr 7, 2006
Link CVE-2006-1657
CISA Vulnrichment
No data
Red Hat
No data
GitHub
No data