CVEvulnerability
CVE-2006-4751
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-09-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-site scripting (XSS) vulnerability in index.php in Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the errcode parameter.
Affected configurations
• laurentiu matei expandable home page cms 0.5.1
References
- http://secunia.com/advisories/21877 Vendor Advisory
- http://securityreason.com/securityalert/1565 securityreason.com
- http://securitytracker.com/id?1016823 Exploit
- http://www.securityfocus.com/archive/1/445727/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19948 Exploit
- http://www.vupen.com/english/advisories/2006/3560 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28860 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/21877 Vendor Advisory
- http://securityreason.com/securityalert/1565 securityreason.com
- http://securitytracker.com/id?1016823 Exploit
- http://www.securityfocus.com/archive/1/445727/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19948 Exploit
- http://www.vupen.com/english/advisories/2006/3560 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28860 exchange.xforce.ibmcloud.com