CVE-2006-2951
Last modified
CVE-2006-2951 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.10 and earlier allow remote attackers to inject arbitrary web script and HTML via the (1) Titlesitename or (2) sitename parameter to (a) header.php, (3) nuke_url parameter to (b) meta/meta.php, (4) forum parameter to (c) viewforum.php, (5) post_id, (6) forum, (7) topic, or (8) arbre parameter to (d) editpost.php, or (9) uname or (10) email parameter to (e) user.php.. EPSS estimates a 2.15% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.10 and earlier allow remote attackers to inject arbitrary web script and HTML via the (1) Titlesitename or (2) sitename parameter to (a) header.php, (3) nuke_url parameter to (b) meta/meta.php, (4) forum parameter to (c) viewforum.php, (5) post_id, (6) forum, (7) topic, or (8) arbre parameter to (d) editpost.php, or (9) uname or (10) email parameter to (e) user.php.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Npds | Npds | <= 5.10 |
| Npds | Npds | 4.8 |
| Npds | Npds | 5.0 |
References
- http://secunia.com/advisories/20523Exploit, Vendor Advisory
- http://www.vupen.com/english/advisories/2006/2233Vendor Advisory
- http://secunia.com/advisories/20523Exploit, Vendor Advisory
- http://www.vupen.com/english/advisories/2006/2233Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-2951?
How severe is CVE-2006-2951?
How do I fix CVE-2006-2951?
Are you affected by CVE-2006-2951?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST