CVE-2006-0885

Description

References

• myimei.com/security/2006-02-20/cutenews141addcommentforprotectedusernamesxss-attack.html
• secunia.com/advisories/18981 · Exploit
• osvdb.org/23400
• securityfocus.com/archive/1/425583
• securityfocus.com/bid/16740
• vupen.com/english/advisories/2006/0685
• exchange.xforce.ibmcloud.com/vulnerabilities/24835

Autres vulnérabilités de cutenews

• CVE-2020-5558ÉLEVÉE 8.8CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors.
• CVE-2020-5557MOYENNE 6.1Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
• CVE-2019-11447ÉLEVÉE 8.8An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile ar…
• CVE-2009-4250MOYENNE 4.3Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject …
• CVE-2009-4249FAIBLE 2.6Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when register_globals is enabled and magic_quotes_gpc is disa…