CVE-2006-3052

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• CEScripts (Multiple Scripts) - Cross-Site Scripting2006-06-13 · webapps · php · Verified

Impact

Cross-site scripting (XSS) vulnerability in Event Registration allows remote attackers to inject arbitrary web script or HTML via the (1) event_id parameter to view-event-details.php or (2) select_events parameter to event-registration.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected products

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/20640
• http://www.osvdb.org/26490
• http://www.osvdb.org/26491
• http://www.vupen.com/english/advisories/2006/2345
• http://secunia.com/advisories/20640
• http://www.osvdb.org/26490
• http://www.osvdb.org/26491
• http://www.vupen.com/english/advisories/2006/2345