CVE-2006-7072

Cross-site scripting (XSS) vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to inject arbitrary web script and HTML via the (1) b[username] and (2) c parameters to (a) index.php, the b[username] parameter to (b) admin/index.php, and (3) c[phone] parameter to register.php.

• http://secunia.com/advisories/21237Vendor Advisory
• http://securityreason.com/securityalert/2324
• http://www.osvdb.org/27630
• http://www.osvdb.org/27631
• http://www.osvdb.org/27632
• http://www.securityfocus.com/archive/1/441294/100/0/threaded
• http://www.securityfocus.com/bid/19196Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/3065
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28041
• http://secunia.com/advisories/21237Vendor Advisory
• http://securityreason.com/securityalert/2324
• http://www.osvdb.org/27630
• http://www.osvdb.org/27631
• http://www.osvdb.org/27632
• http://www.securityfocus.com/archive/1/441294/100/0/threaded
• http://www.securityfocus.com/bid/19196Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/3065
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28041

Published

Mar 2, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-7066Microsoft Internet Explorer 6 on Windows XP SP2 allows remot…
• CVE-2006-7067Oracle 10g R2 and possibly other versions allows remote atta…
• CVE-2006-7068PHP remote file inclusion vulnerability in CliServ Web Commu…
• CVE-2006-7069PHP remote file inclusion vulnerability in smarty_config.php…
• CVE-2006-7070Unrestricted file upload vulnerability in manager/media/ibro…
• CVE-2006-7071SQL injection vulnerability in classes/class_session.php in …
• CVE-2006-7073Cross-site scripting (XSS) vulnerability in Opentools Attach…
• CVE-2006-7074admin.php in SmartSiteCMS 1.0 allows remote attackers to byp…
• CVE-2006-7075Buffer overflow in the meta_read_flac function in meta_decod…
• CVE-2006-7076Cross-site scripting (XSS) vulnerability in guestbook.php in…
• CVE-2006-7077SQL injection vulnerability in guestbook.php in Advanced Gue…
• CVE-2006-7078Multiple cross-site scripting (XSS) vulnerabilities in Profe…