CVEvulnerability
CVE-2006-1417
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-03-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Caloris Planitia Online Quiz System (aka Web Quiz pro), possibly 1.0, allow remote attackers to inject arbitrary web script or HTML via the (1) exam parameter in prequiz.asp or (2) msg parameter in student.asp.
Affected configurations
• caloris planitia technologies web quiz pro 1.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://pridels0.blogspot.com/2006/03/web-quiz-pro-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/19416 Vendor Advisory
- http://www.osvdb.org/24129 Exploit
- http://www.osvdb.org/24130 Exploit
- http://www.securityfocus.com/bid/17255 Exploit
- http://www.vupen.com/english/advisories/2006/1091 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25431 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2006/03/web-quiz-pro-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/19416 Vendor Advisory
- http://www.osvdb.org/24129 Exploit
- http://www.osvdb.org/24130 Exploit
- http://www.securityfocus.com/bid/17255 Exploit
- http://www.vupen.com/english/advisories/2006/1091 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25431 exchange.xforce.ibmcloud.com