CVE-2006-2989 - Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter

Published Jun 13, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.82%

Description

Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://pridels0.blogspot.com/2006/06/asp-listpics-43-xss-vuln.html
x_refsource_MISC
http://secunia.com/advisories/20517
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/18438
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/2250
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/27068
vdb-entryx_refsource_XF

Link	Providers	Tags
http://pridels0.blogspot.com/2006/06/asp-listpics-43-xss-vuln.html		x_refsource_MISC
http://secunia.com/advisories/20517		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/18438		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/2250		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/27068		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 13, 2006

Updated Aug 7, 2024

Reserved Jun 12, 2006

Link CVE-2006-2989

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-2989

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-2989