CVEvulnerability
CVE-2006-4528
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-09-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) recherche parameter in recherchemembre.php and the (2) email parameter in test.php.
Affected configurations
• membrepass membrepass 1.5
References
- http://acid-root.new.fr/advisories/09290806.txt acid-root.new.fr
- http://secunia.com/advisories/21715 Vendor Advisory
- http://securityreason.com/securityalert/1487 securityreason.com
- http://www.securityfocus.com/archive/1/444845/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19789 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3427 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28691 exchange.xforce.ibmcloud.com
- http://acid-root.new.fr/advisories/09290806.txt acid-root.new.fr
- http://secunia.com/advisories/21715 Vendor Advisory
- http://securityreason.com/securityalert/1487 securityreason.com
- http://www.securityfocus.com/archive/1/444845/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19789 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3427 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28691 exchange.xforce.ibmcloud.com