CVEvulnerability
CVE-2006-6520
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-12-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple cross-site scripting (XSS) vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) pseudo parameter to (a) existepseudo.php, the (2) email parameter to (b) existeemail.php, or the (3) pageName or (4) cssform parameter to (c) Contact/contact.php.
Affected configurations
• scriptphp messageriescripthp 2.0
References
- http://secunia.com/advisories/23319 secunia.com
- http://securityreason.com/securityalert/2026 securityreason.com
- http://www.securityfocus.com/archive/1/453965/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21513 Exploit
- http://www.vupen.com/english/advisories/2006/4939 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30819 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/23319 secunia.com
- http://securityreason.com/securityalert/2026 securityreason.com
- http://www.securityfocus.com/archive/1/453965/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21513 Exploit
- http://www.vupen.com/english/advisories/2006/4939 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30819 exchange.xforce.ibmcloud.com