CVEvulnerability
CVE-2006-2610
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-05-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in view.php in phpRaid 2.9.5 allows remote attackers to inject arbitrary web script or HTML via the (1) URL query string and the (2) Sort parameter.
Affected configurations
• spiffyjr phpraid 2.9.5
References
- http://securityreason.com/securityalert/962 securityreason.com
- http://www.securityfocus.com/archive/1/434736/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18042 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26599 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/962 securityreason.com
- http://www.securityfocus.com/archive/1/434736/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18042 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26599 exchange.xforce.ibmcloud.com