Unscored CVE-2006-4058 EUVD-2006-4051GHSA-xj4j-2r6r-jmj6

Cross-site scripting (XSS) vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script…

Published Aug 10, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyw parameter when performing a search. NOTE: some details are obtained from third party information.

References

ADV-2006-3186 vdb-entry
20060806 simplog 0.9.3 and prior XSS mailing-list
simplog-archive-xss(28266) vdb-entry
21390 third-party-advisory
1358 third-party-advisory
1016651 vdb-entry
27823 vdb-entry