QwikSec

Security Database

CVE

CWE

Training

CVE-2006-0880

Published: Feb 24, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) inf parameter; or, when register_globals is enabled, the (2) upperTemplate and (3) lowerTemplate parameters.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

noahs-indexphp-xss(24895)

vdb-entry

x_refsource_XF

20060222 [KAPDA::#29]Noah's classifieds multiple vulnerabilities

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_SECTRACK

vdb-entry

x_refsource_BID

http://www.kapda.ir/advisory-268.html

x_refsource_MISC

vdb-entry

x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.