CVE-2006-6768

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) main parameter.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2006-12-27

Last modified

2024-08-07

Affected products

• The Classified Ad System (Pwp Technologies)

References

• http://secunia.com/advisories/23289
• http://securityreason.com/securityalert/2075
• http://www.securityfocus.com/archive/1/452194/100/200/threaded
• http://www.securityfocus.com/bid/21198
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30445