Unscored CVE-2006-3916 EUVD-2006-3910GHSA-qfpc-5mc5-fxjm

Cross-site scripting (XSS) vulnerability in snews.php in sNews (aka Solucija News) 1.4 allows remote attackers to inject arbitrary web scri…

Published Jul 28, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in snews.php in sNews (aka Solucija News) 1.4 allows remote attackers to inject arbitrary web script or HTML via the search_query parameter.

References

http://security-net.biz/adv/D25706a.txt
ADV-2006-2968 vdb-entry
snews-snews-xss(27940) vdb-entry
27481 vdb-entry
21189 third-party-advisory
19156 vdb-entry