CVE-2006-1848

LOW 2.6CVE-2006-1848 · Published 19/04/2006 · updated 16/06/2026

In short

CVE-2006-1848 is a LOW (CVSS 2.6) vulnerability affecting linpha (linpha).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
linpha linpha	`= 1.1.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in stats_view.php in LinPHA 1.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date_from, (2) date_to, and (3) date parameter.

References

d4igoro.blogspot.com/2006/04/linpha-xss-vulnerabilities.html · Exploit
secunia.com/advisories/19679 · Vendor Advisory
securityfocus.com/archive/1/431242/100/0/threaded
securityfocus.com/bid/17581 · Exploit
vupen.com/english/advisories/2006/1396
exchange.xforce.ibmcloud.com/vulnerabilities/25916

More vulnerabilities in linpha

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

linpha

= 1.1.0

No fix yet

More vulnerabilities in linpha

See all →