Unscored CVE-2006-0938 EUVD-2006-0941GHSA-8mhv-894q-c3wq

Cross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via…

Published Mar 1, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the RefererURL parameter.

References

http://www.nukedx.com/?viewdoc=16
16817 vdb-entry
ezpublish-referrerurl-xss(24956) vdb-entry
20060225 Advisory: eZ publish <= 3.7.3 (imagecatalogue module) XSSvulnerability mailing-list
1015683 vdb-entry