Unscored CVE-2006-3060 EUVD-2006-3057GHSA-wx9p-7hgq-2q2g

Cross-site scripting (XSS) vulnerability in P.A.I.D 2.2 allows remote attackers to inject arbitrary web script or HTML via the (1) read par…

Published Jun 19, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in P.A.I.D 2.2 allows remote attackers to inject arbitrary web script or HTML via the (1) read parameter in index.php, (2) farea parameter in faq.php, and (3) unspecified input fields on the "My Account" login page.

References

20060609 P.A.I.D v2.2 mailing-list
ADV-2006-2304 vdb-entry
20601 third-party-advisory
paid--faq-index-login-xss(27157) vdb-entry
1108 third-party-advisory