Unscored CVE-2006-2307 EUVD-2006-2308GHSA-7wfj-vxqm-p4gp

Cross-site scripting (XSS) vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML v…

Published May 11, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name.

References

17868 vdb-entry
20060522 Re: WebsiteBaker CMS lack of sanitizing mailing-list
ADV-2006-1840 vdb-entry
889 third-party-advisory
website-baker-displayname-xss(26326) vdb-entry
20060506 WebsiteBaker CMS lack of sanitizing mailing-list
20081 third-party-advisory