Unscored CVE-2006-2687 EUVD-2006-2686GHSA-rq57-hqjh-94jr

Cross-site scripting (XSS) vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject ar…

Published May 31, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject arbitrary web script or HTML via the email address (useremail parameter).

References

ADV-2006-2020 vdb-entry
20305 third-party-advisory
18127 vdb-entry
20060523 PHP AGTC-Membership system <= v1.1a XSS mailing-list
phpagtc-adduser-xss(26703) vdb-entry
995 third-party-advisory