CVEvulnerability
CVE-2006-5059
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-09-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to (1) dosearch.php, (2) postlist.php, (3) showmembers.php, (4) faq_english.php, (5) online.php, (6) login.php, (7) newuser.php, (8) wwwthreads.php, (9) search.php, or (10) postlist.php.
Affected configurations
• wired community software wwwthreads (<= 5.4.2)
• wired community software wwwthreads 5.4
• wired community software wwwthreads rc3
References
- http://secunia.com/advisories/22211 secunia.com
- http://securityreason.com/securityalert/1645 securityreason.com
- http://www.securityfocus.com/archive/1/446911/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20178 Exploit
- http://www.vupen.com/english/advisories/2006/3858 www.vupen.com
- http://secunia.com/advisories/22211 secunia.com
- http://securityreason.com/securityalert/1645 securityreason.com
- http://www.securityfocus.com/archive/1/446911/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20178 Exploit
- http://www.vupen.com/english/advisories/2006/3858 www.vupen.com