Unscored CVE-2006-2367 EUVD-2006-2368GHSA-2m75-q268-c73v

Cross-site scripting (XSS) vulnerability in index.php in Clansys (aka Clanpage System) 1.0 and 1.1 allows remote attackers to inject arbitr…

Published May 15, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in Clansys (aka Clanpage System) 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the func parameter in a search function.

References

892 third-party-advisory
http://soot.shabgard.org/bugs/Clansys.txt
1015934 vdb-entry
20060412 Clansys v.1.1 Multiple Xss Vulnerabilities mailing-list
clansys-index-xss(25783) vdb-entry
19609 third-party-advisory