CVEvulnerability

CVE-2006-7078

4.3 MEDIUM Published 2007-03-02 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-03-02
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in Professional Home Page Tools Login Script, as of July 2006, allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) vorname, and (3) nachname parameters in the register script. NOTE: some details have been obtained from third party sources.

Affected configurations

• professional home page tools login script professional home page tools login script

References

http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048194.html lists.grok.org.uk
http://secunia.com/advisories/21206 Vendor Advisory
http://securityreason.com/securityalert/2329 securityreason.com
http://www.securityfocus.com/archive/1/441194/100/0/threaded www.securityfocus.com
http://www.vupen.com/english/advisories/2006/2981 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27967 exchange.xforce.ibmcloud.com
http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048194.html lists.grok.org.uk
http://secunia.com/advisories/21206 Vendor Advisory
http://securityreason.com/securityalert/2329 securityreason.com
http://www.securityfocus.com/archive/1/441194/100/0/threaded www.securityfocus.com
http://www.vupen.com/english/advisories/2006/2981 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27967 exchange.xforce.ibmcloud.com