Unscored CVE-2006-2011 EUVD-2006-2012GHSA-cqjg-ppxj-v4xr

Cross-site scripting (XSS) vulnerability in member.php in 4images 1.7 and earlier allows remote attackers to inject arbitrary web script or…

Published Apr 25, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in member.php in 4images 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the nickname, probably involving the user_name parameter in register.php.

References

19745 third-party-advisory
24796 vdb-entry
ADV-2006-1449 vdb-entry
17625 vdb-entry
20060420 4images <= 1.7 XSS mailing-list
4images-member-xss(25987) vdb-entry