Unscored CVE-2006-2567 EUVD-2006-2567GHSA-chvp-cwr8-jphq

Cross-site scripting (XSS) vulnerability in submit_article.php in Alstrasoft Article Manager Pro 1.6 allows remote attackers to inject arbi…

Published May 24, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in submit_article.php in Alstrasoft Article Manager Pro 1.6 allows remote attackers to inject arbitrary web script or HTML when submitting an article, as demonstrated using a javascript URI in a Cascading Style Sheets (CSS) property of a STYLE attribute of an element.

References

949 third-party-advisory
20228 third-party-advisory
article-manager-submitarticle-xss(26673) vdb-entry
ADV-2006-1943 vdb-entry
20060522 Alstrasoft Article Manager Pro v1.6 mailing-list