CVE-2006-2803

Multiple cross-site scripting (XSS) vulnerabilities in PHP ManualMaker 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) id parameter to index.php, (2) search field (possibly the s parameter), or (3) comment field.

• CWE-79

• http://secunia.com/advisories/20453Vendor Advisory
• http://securityreason.com/securityalert/1024
• http://www.securityfocus.com/archive/1/435717/100/0/threaded
• http://www.securityfocus.com/bid/18244Exploit
• http://www.vupen.com/english/advisories/2006/2138Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26926
• http://secunia.com/advisories/20453Vendor Advisory
• http://securityreason.com/securityalert/1024
• http://www.securityfocus.com/archive/1/435717/100/0/threaded
• http://www.securityfocus.com/bid/18244Exploit
• http://www.vupen.com/english/advisories/2006/2138Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26926

Published

Jun 3, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2797Multiple SQL injection vulnerabilities in phpCommunityCalend…
• CVE-2006-2798Multiple cross-site scripting (XSS) vulnerabilities in phpCo…
• CVE-2006-2799Cross-site scripting (XSS) vulnerability in content_footer.p…
• CVE-2006-2800Multiple cross-site scripting (XSS) vulnerabilities in Unak …
• CVE-2006-2801Multiple SQL injection vulnerabilities in Unak CMS 1.5 RC2 a…
• CVE-2006-2802Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) fo…
• CVE-2006-2804Cross-site scripting (XSS) vulnerability in index.cfm in Gos…
• CVE-2006-2805SQL injection vulnerability in VBulletin 3.0.10 allows remot…
• CVE-2006-2806The SMTP server in Apache Java Mail Enterprise Server (aka A…
• CVE-2006-2807ASPwebSoft Speedy Asp Discussion Forum allows remote attacke…
• CVE-2006-2808Cross-site scripting (XSS) vulnerability in Lycos Tripod htm…
• CVE-2006-2809Multiple cross-site scripting (XSS) vulnerabilities in index…