Unscored CVE-2006-3039 EUVD-2006-3036GHSA-m37c-6f53-22x7

Cross-site scripting (XSS) vulnerability in index.php in Cescripts Realty Home Rent allows remote attackers to inject arbitrary web script …

Published Jun 15, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in Cescripts Realty Home Rent allows remote attackers to inject arbitrary web script or HTML via the sel_menu parameter. NOTE: the vendor notified CVE on 20060823 that "All issues concerning this script and others at cescripts.com have been addressed and fixed."

References

20060823 Vendor ACK - CVE-2006-3038 (fwd) mailing-list
20584 third-party-advisory
20060823 Bugtraq ID: 18402 mailing-list
ADV-2006-2343 vdb-entry
20060611 cescripts.com - XSS mailing-list