Unscored CVE-2006-4162 EUVD-2006-4152GHSA-2jcq-2g28-r229

Cross-site scripting (XSS) vulnerability in Dragonfly CMS 9.0.6.1 and earlier allows remote attackers to inject arbitrary web script or HTM…

Published Aug 16, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Dragonfly CMS 9.0.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search field.

References

cpg-dragonfly-search-xss(28333) vdb-entry
20060809 Dragonfly CMS 9.0.6.1 and prior XSS mailing-list
1394 third-party-advisory