medium4.3
CVE-2006-5496
Multiple cross-site scripting (XSS) vulnerabilities in Timothy Claason KnowledgeBank 1.01 allow remote attackers to inject arbitrary web script or HTML via uns…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Timothy Claason KnowledgeBank 1.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) index.php, (2) addknowledge.php, and (3) addscreenshot.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Timothy Claason | Knowledgebank | Version 1.01 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/1769
- http://securitytracker.com/id?1017097
- http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0006
- http://www.securityfocus.com/archive/1/449231/100/0/threaded
- http://www.securityfocus.com/bid/20641
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29700
- http://securityreason.com/securityalert/1769
- http://securitytracker.com/id?1017097
- http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0006
- http://www.securityfocus.com/archive/1/449231/100/0/threaded
- http://www.securityfocus.com/bid/20641
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29700