CVEvulnerability
CVE-2006-1946
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-04-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the keyval parameter in pbpgst.cgi, (2) the catsubno parameter in pblscg.cgi, and (3) the listno parameter in pblsmb.cgi.
Affected configurations
• visale visale (<= 1.0)
References
- http://pridels0.blogspot.com/2006/04/visale-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/19655 Exploit, Vendor Advisory
- http://www.osvdb.org/24716 Exploit
- http://www.osvdb.org/24717 Exploit
- http://www.osvdb.org/24718 Exploit
- http://www.securityfocus.com/bid/17598 Exploit
- http://www.vupen.com/english/advisories/2006/1408 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25928 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2006/04/visale-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/19655 Exploit, Vendor Advisory
- http://www.osvdb.org/24716 Exploit
- http://www.osvdb.org/24717 Exploit
- http://www.osvdb.org/24718 Exploit
- http://www.securityfocus.com/bid/17598 Exploit
- http://www.vupen.com/english/advisories/2006/1408 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25928 exchange.xforce.ibmcloud.com