CVE-2006-5643

Cross-site scripting (XSS) vulnerability in search_de.html in foresite CMS allows remote attackers to inject arbitrary web script or HTML via the query parameter.

• http://secunia.com/advisories/22648Exploit, Vendor Advisory
• http://securitytracker.com/id?1017134Exploit
• http://www.majorsecurity.de/index_2.php?major_rls=major_rls29Exploit
• http://www.securityfocus.com/archive/1/450046/100/0/threaded
• http://www.securityfocus.com/bid/20818Exploit
• http://www.vupen.com/english/advisories/2006/4278
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29906
• http://secunia.com/advisories/22648Exploit, Vendor Advisory
• http://securitytracker.com/id?1017134Exploit
• http://www.majorsecurity.de/index_2.php?major_rls=major_rls29Exploit
• http://www.securityfocus.com/archive/1/450046/100/0/threaded
• http://www.securityfocus.com/bid/20818Exploit
• http://www.vupen.com/english/advisories/2006/4278
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29906

Published

Nov 1, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5637PHP remote file inclusion vulnerability in faq_reply.php in …
• CVE-2006-5638Multiple SQL injection vulnerabilities in cherche.php in PHP…
• CVE-2006-5639Unspecified vulnerability in the random number generator in …
• CVE-2006-5640SQL injection vulnerability in guestbookview.asp in Techno D…
• CVE-2006-5641SQL injection vulnerability in MainAnnounce2.asp in Techno D…
• CVE-2006-5642Unspecified vulnerability in NmnLogger 1.0.0 and earlier has…
• CVE-2006-5645Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-V…
• CVE-2006-5646Heap-based buffer overflow in Sophos Anti-Virus and Endpoint…
• CVE-2006-5647Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-V…
• CVE-2006-5648Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users t…5.5
• CVE-2006-5649Unspecified vulnerability in the "alignment check exception …5.5
• CVE-2006-5650The ICQPhone.SipxPhoneManager ActiveX control in America Onl…