Unscored CVE-2006-3038 EUVD-2006-3035GHSA-45mq-r4mg-m7xq

Cross-site scripting (XSS) vulnerability in index.php in Cescripts Realty Room Rent allows remote attackers to inject arbitrary web script …

Published Jun 15, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in Cescripts Realty Room Rent allows remote attackers to inject arbitrary web script or HTML via the sel_menu parameter. NOTE: the vendor notified CVE on 20060823 that "All issues concerning this script and others at cescripts.com have been addressed and fixed."

References

20586 third-party-advisory
ADV-2006-2344 vdb-entry
20060823 Vendor ACK - CVE-2006-3038 (fwd) mailing-list
20060823 Bugtraq ID: 18402 mailing-list
20060611 cescripts.com - XSS mailing-list