low2.6Public exploit code
CVE-2006-1943
Multiple cross-site scripting (XSS) vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote attackers to inject arbitrary web script o…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IntelliLink Pro 5.06 - 'edit.cgi' Multiple Cross-Site Scripting Vulnerabilities2006-04-19 · webapps · cgi · Verified
- IntelliLink Pro 5.06 - 'addlink_lwp.cgi?url' Cross-Site Scripting2006-04-19 · webapps · cgi · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter in addlink_lwp.cgi and the (2) id, (3) forgotid, and (4) forgotpass parameters in edit.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smarter Scripts | Intellilink Pro | Version 5.06 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2006/04/intellilink-pro-xss-vuln.html
- http://secunia.com/advisories/19701
- http://www.osvdb.org/24732
- http://www.osvdb.org/24733
- http://www.securityfocus.com/bid/17605
- http://www.vupen.com/english/advisories/2006/1409
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25929
- http://pridels0.blogspot.com/2006/04/intellilink-pro-xss-vuln.html
- http://secunia.com/advisories/19701
- http://www.osvdb.org/24732
- http://www.osvdb.org/24733
- http://www.securityfocus.com/bid/17605
- http://www.vupen.com/english/advisories/2006/1409
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25929