CVE-2006-3558

MEDIUM 4.3CVE-2006-3558 · Published 13/07/2006 · updated 16/06/2026

In short

CVE-2006-3558 is a MEDIUM (CVSS 4.3) vulnerability affecting auracms (arif supriyanto).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
auracms arif_supriyanto	`= 1.62`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to inject arbitrary web script or HTML via (1) the judul_artikel parameter in teman.php and (2) the title of an article sent to admin, which is displayed when unauthenticated users visit index.php.

References

h1.ripway.com/lintah/adv/txt/01-iFX-2006-AuraCMS-v1.62-XSS-Bug.txt · Exploit
securityreason.com/securityalert/1226
osvdb.org/28200
osvdb.org/28202
securityfocus.com/archive/1/439494/100/0/threaded
securityfocus.com/bid/18867 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/27703
exchange.xforce.ibmcloud.com/vulnerabilities/27704

More vulnerabilities in auracms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free