QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-3061

Back to search

CVE-2006-3061

Published: Jun 19, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web script or HTML via the (1) sort parameter in index2.php, (2) item_id parameter in report.php, (3) search_term parameter (aka the "search box") in search_reviews.php, (4) the profile field in usercp/profile_edit1.php, and the (5) review field in review_form.php.

VendorProductVersions

n/a

n/a

affected
n/a

References

20613
third-party-advisory
x_refsource_SECUNIA
ADV-2006-2346
vdb-entry
x_refsource_VUPEN
26499
vdb-entry
x_refsource_OSVDB
1107
third-party-advisory
x_refsource_SREASON
fivestarreview-index2-xss(27188)
vdb-entry
x_refsource_XF
18390
vdb-entry
x_refsource_BID
fivestarreview-report-xss(27189)
vdb-entry
x_refsource_XF
26497
vdb-entry
x_refsource_OSVDB
fivestarreview-profile-xss(27192)
vdb-entry
x_refsource_XF
26498
vdb-entry
x_refsource_OSVDB
26496
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now