CVE-2006-0463

Cross-site scripting (XSS) vulnerability in IdeoContent Manager allows remote attackers to inject arbitrary web script or HTML via the (1) goto_id parameter to index.php or (2) page parameter to news_full.php.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2006-01-27

Last modified

2024-09-17

Affected products

• Ideocontent Manager (Ideosoft Design)

References

• http://osvdb.org/ref/22/22712-ideocontent.txt
• http://www.osvdb.org/22712
• http://www.osvdb.org/22713