CVE-2006-3927 - Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitrary web script or HTML via the advsrc parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitrary web script or HTML via the advsrc parameter

Published Jul 31, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.93%

Description

Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitrary web script or HTML via the advsrc parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html
mailing-listx_refsource_BUGTRAQExploit
http://secunia.com/advisories/21201
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1298
third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016595
vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/27544
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/19158
vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/28030
vdb-entryx_refsource_XF

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html		mailing-listx_refsource_BUGTRAQExploit
http://secunia.com/advisories/21201		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1298		third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016595		vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/27544		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/19158		vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/28030		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 31, 2006

Updated Aug 7, 2024

Reserved Jul 31, 2006

Link CVE-2006-3927

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-3927

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-3927