CVE-2006-6871

MEDIUM 6.8CVE-2006-6871 · Published 31/12/2006 · updated 16/06/2026

In short

CVE-2006-6871 is a MEDIUM (CVSS 6.8) vulnerability affecting endonesia (endonesia).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 81.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
endonesia endonesia	`= 8.4`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter in a viewlink operation in mod.php, (2) the intypeid parameter in a showinfo operation in the informasi module in mod.php, (3) the "your Friend" field in friend.php, or (4) the "Main Text" field in admin.php.

References

secunia.com/advisories/23502 · Vendor Advisory
securityfocus.com/bid/21333 · Exploit
vupen.com/english/advisories/2006/5187
exchange.xforce.ibmcloud.com/vulnerabilities/31116
exploit-db.com/exploits/3004

More vulnerabilities in endonesia

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

endonesia

= 8.4

No fix yet

Description

More vulnerabilities in endonesia

See all →