CVE-2006-1850

LOW 2.6CVE-2006-1850 · Published 19/04/2006 · updated 16/06/2026

In short

CVE-2006-1850 is a LOW (CVSS 2.6) vulnerability affecting xflow (skymarx solutions).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xflow skymarx_solutions	`≤ 5.46.11`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) level, (2) position, (3) id, and (4) action parameters to members_only/index.cgi, and the (5) page parameter to customer_area/index.cgi.

References

pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html
secunia.com/advisories/19707 · Vendor Advisory
securityfocus.com/bid/17614
vupen.com/english/advisories/2006/1412
exchange.xforce.ibmcloud.com/vulnerabilities/25854

More vulnerabilities in xflow

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free