CVEvulnerability
CVE-2006-1950
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-04-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) aff and (2) cat parameters.
Affected configurations
• perlcoders group bannerfarm 2.3
References
- http://pridels0.blogspot.com/2006/04/bannerfarm-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/19718 Vendor Advisory
- http://www.osvdb.org/24728 www.osvdb.org
- http://www.securityfocus.com/bid/17613 Exploit
- http://www.vupen.com/english/advisories/2006/1410 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25919 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2006/04/bannerfarm-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/19718 Vendor Advisory
- http://www.osvdb.org/24728 www.osvdb.org
- http://www.securityfocus.com/bid/17613 Exploit
- http://www.vupen.com/english/advisories/2006/1410 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25919 exchange.xforce.ibmcloud.com