medium5.8Public exploit code
CVE-2006-1965
Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML v…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Net Clubs Pro 4.0 - 'login.cgi?Password' Cross-Site Scripting2006-04-20 · webapps · cgi · Verified
- Net Clubs Pro 4.0 - 'imessage.cgi?Username' Cross-Site Scripting2006-04-20 · webapps · cgi · Verified
- Net Clubs Pro 4.0 - 'sendim.cgi' Multiple Cross-Site Scripting Vulnerabilities2006-04-20 · webapps · cgi · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) onuser, (2) pass, (3) chatsys, (4) room, (5) username, and (6) to parameters in (a) sendim.cgi; the (7) username parameter in (b) imessage.cgi; the (8) password parameter in (c) login.cgi; and the (9) cat_id parameter in (d) viewcat.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aasi Media | Net Clubs Pro | Version 4.0 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2006/04/net-clubs-pro-xss-vuln.html
- http://secunia.com/advisories/19651
- http://www.osvdb.org/24754
- http://www.osvdb.org/24755
- http://www.osvdb.org/24756
- http://www.osvdb.org/24757
- http://www.securityfocus.com/bid/17622
- http://www.vupen.com/english/advisories/2006/1436
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25957
- http://pridels0.blogspot.com/2006/04/net-clubs-pro-xss-vuln.html
- http://secunia.com/advisories/19651
- http://www.osvdb.org/24754
- http://www.osvdb.org/24755
- http://www.osvdb.org/24756
- http://www.osvdb.org/24757
- http://www.securityfocus.com/bid/17622
- http://www.vupen.com/english/advisories/2006/1436
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25957