CVEvulnerability
CVE-2006-1965
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-04-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) onuser, (2) pass, (3) chatsys, (4) room, (5) username, and (6) to parameters in (a) sendim.cgi; the (7) username parameter in (b) imessage.cgi; the (8) password parameter in (c) login.cgi; and the (9) cat_id parameter in (d) viewcat.cgi.
Affected configurations
• aasi media net clubs pro 4.0
References
- http://pridels0.blogspot.com/2006/04/net-clubs-pro-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/19651 secunia.com
- http://www.osvdb.org/24754 www.osvdb.org
- http://www.osvdb.org/24755 www.osvdb.org
- http://www.osvdb.org/24756 www.osvdb.org
- http://www.osvdb.org/24757 www.osvdb.org
- http://www.securityfocus.com/bid/17622 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1436 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25957 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2006/04/net-clubs-pro-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/19651 secunia.com
- http://www.osvdb.org/24754 www.osvdb.org
- http://www.osvdb.org/24755 www.osvdb.org
- http://www.osvdb.org/24756 www.osvdb.org
- http://www.osvdb.org/24757 www.osvdb.org
- http://www.securityfocus.com/bid/17622 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1436 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25957 exchange.xforce.ibmcloud.com