CVE Database
/

CVE-2006-6389

Back to search

CVE-2006-6389

Published: Dec 8, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via the (1) Taaa parameter to (a) up.php, or the (2) pollhtml and (3) Bloks parameters to (b) polls.php, different vectors than CVE-2006-5770.

VendorProductVersions

n/a

n/a

affected
n/a

References

37048
vdb-entry
x_refsource_OSVDB
21427
vdb-entry
x_refsource_BID
2018
third-party-advisory
x_refsource_SREASON
37047
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now