CVEvulnerability
CVE-2006-3037
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-06-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in publish.php in ST AdManager Lite allow remote attackers to inject arbitrary web script or HTML via the (1) title, (2) description, (3) article, (4) bio, and (5) name parameters.
Affected configurations
• site trade st admanager lite v1
References
- http://secunia.com/advisories/20598 Vendor Advisory
- http://www.securityfocus.com/archive/1/436657/30/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2303 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27161 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20598 Vendor Advisory
- http://www.securityfocus.com/archive/1/436657/30/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2303 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27161 exchange.xforce.ibmcloud.com