Unscored CVE-2006-2015 EUVD-2006-2016GHSA-6wm7-p2rv-5442

Cross-site scripting (XSS) vulnerability in SL_site 1.0 allows remote attackers to inject arbitrary web script or HTML via the recherche pa…

Published Apr 25, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in SL_site 1.0 allows remote attackers to inject arbitrary web script or HTML via the recherche parameter in recherche.php. NOTE: other XSS vectors, as reported in the original disclosure, are resultant from other primary vulnerabilities that have separate CVE names.

References

24898 vdb-entry
1015972 vdb-entry
ADV-2006-1487 vdb-entry
19792 third-party-advisory
17667 vdb-entry
slsite-recherche-xss(26038) vdb-entry