CVEvulnerability
CVE-2006-2545
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-05-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Xtreme Topsites 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in stats.php and (2) unspecified inputs in lostid.php, probably the searchthis parameter. NOTE: one or more of these vectors might be resultant from SQL injection.
Affected configurations
• xtreme scripts xtreme topsites 1.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/20192 Vendor Advisory
- http://securityreason.com/securityalert/945 securityreason.com
- http://www.osvdb.org/25702 www.osvdb.org
- http://www.securityfocus.com/archive/1/434568/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18055 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1899 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26614 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20192 Vendor Advisory
- http://securityreason.com/securityalert/945 securityreason.com
- http://www.osvdb.org/25702 www.osvdb.org
- http://www.securityfocus.com/archive/1/434568/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18055 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1899 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26614 exchange.xforce.ibmcloud.com