medium4.3Public exploit code
CVE-2006-2986
Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) very simple Realty Lister (vsREAL) 1.0 a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Baby Katie Media VSReal and VScal 1.0 - 'myslideshow.php?title' Cross-Site Scripting2006-06-09 · webapps · php · Verified
- Baby Katie Media VSReal and VScal 1.0 - 'index.php?lid' Cross-Site Scripting2006-06-09 · webapps · php · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) very simple Realty Lister (vsREAL) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) lid parameter in index.php and the (2) title parameter in myslideshow.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Baby Katie Media | Very Simple Car Lister | Version 1.0 |
| Baby Katie Media | Very Simple Realty Lister | Version 1.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20533
- http://securityreason.com/securityalert/1084
- http://www.securityfocus.com/archive/1/436411/100/0/threaded
- http://www.securityfocus.com/bid/18350
- http://www.vupen.com/english/advisories/2006/2238
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27095
- http://secunia.com/advisories/20533
- http://securityreason.com/securityalert/1084
- http://www.securityfocus.com/archive/1/436411/100/0/threaded
- http://www.securityfocus.com/bid/18350
- http://www.vupen.com/english/advisories/2006/2238
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27095