CVE-2006-5944

Cross-site scripting (XSS) vulnerability in csm/asp/listings.asp in MGinternet Car Site Manager (CSM) allows remote attackers to inject arbitrary web script or HTML via the s parameter.

• http://s-a-p.ca/index.php?page=OurAdvisories&id=17Vendor Advisory, URL Repurposed
• http://secunia.com/advisories/22914Vendor Advisory
• http://securityreason.com/securityalert/1876
• http://www.securityfocus.com/archive/1/451557/100/0/threaded
• http://www.securityfocus.com/bid/21066Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4532
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30274
• http://s-a-p.ca/index.php?page=OurAdvisories&id=17Vendor Advisory, URL Repurposed
• http://secunia.com/advisories/22914Vendor Advisory
• http://securityreason.com/securityalert/1876
• http://www.securityfocus.com/archive/1/451557/100/0/threaded
• http://www.securityfocus.com/bid/21066Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4532
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30274

Published

Nov 17, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5938Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and…
• CVE-2006-5939Grisoft AVG Anti-Virus before 7.1.407 allows remote attacker…
• CVE-2006-5940Unspecified vulnerability in Grisoft AVG Anti-Virus before 7…
• CVE-2006-5941Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-5942Cross-site scripting (XSS) vulnerability in inventory/displa…
• CVE-2006-5943Multiple SQL injection vulnerabilities in inventory/display/…
• CVE-2006-5945Multiple SQL injection vulnerabilities in MGinternet Car Sit…
• CVE-2006-5946SQL injection vulnerability in demo/glossary/glossary.asp in…
• CVE-2006-5947Multiple directory traversal vulnerabilities in Conxint FTP …
• CVE-2006-5948PHP remote file inclusion vulnerability in pntUnit/Inspect.p…
• CVE-2006-5949Directory traversal vulnerability in ALTools ALFTP FTP Serve…
• CVE-2006-5950Unspecified vulnerability in ALTools ALFTP FTP Server 4.1 be…