medium4.0Public exploit code
CVE-2006-3143
Cross-site scripting (XSS) vulnerability in icue_login.asp in Maximus SchoolMAX 4.0.1 and earlier iCue and iParent applications allows remote attackers to inje…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Maximus SchoolMAX 4.0.1 - 'Error_msg' Cross-Site Scripting2006-06-21 · webapps · asp · Verified
Impact
Cross-site scripting (XSS) vulnerability in icue_login.asp in Maximus SchoolMAX 4.0.1 and earlier iCue and iParent applications allows remote attackers to inject arbitrary web script or HTML via the error_msg parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maximus | Schoolmax | Version 4.0.1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20752
- http://securityreason.com/securityalert/1121
- http://www.securityfocus.com/archive/1/437640/100/0/threaded
- http://www.securityfocus.com/bid/18563
- http://www.vupen.com/english/advisories/2006/2453
- http://secunia.com/advisories/20752
- http://securityreason.com/securityalert/1121
- http://www.securityfocus.com/archive/1/437640/100/0/threaded
- http://www.securityfocus.com/bid/18563
- http://www.vupen.com/english/advisories/2006/2453