Vulnerability in Htmljunction Ezhomepagepro
CVE-2006-1413
Multiple cross-site scripting (XSS) vulnerabilities in EZHomepagePro 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) adid or (2) aname parameter in (a) common/email.asp, (b) users/users_search.asp, or (c) users/users_profiles.asp; (3) page parameter in (d) users/users_calendar.asp; (4) usid parameter in (e) users/users_mgallery.asp; or (5) m parameter in (f) users/users_search.asp.
EPSS: 0.047 (90.9th percentile) — read the EPSS interpretation.
Affected products
- Htmljunction Ezhomepagepro
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_OSVDB, Exploit, vdb-entry)
- cve@mitre.org (x_refsource_OSVDB, Exploit, vdb-entry)
- cve@mitre.org (x_refsource_OSVDB, Exploit, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (Exploit, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, Exploit, vdb-entry)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_OSVDB, Exploit, vdb-entry)