Unscored CVE-2006-1507 EUVD-2006-1511GHSA-4p8v-v3vv-84rr

Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the error para…

Published Mar 30, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the error parameter to include.php, possibly due to a problem in login/login.php.

References

phpkit-error-xss(25594) vdb-entry
20060328 XSS in PHPKIT Version 1.6.03 mailing-list
17291 vdb-entry