Unscored CVE-2006-4351 EUVD-2006-4339GHSA-m7m4-6jh4-8g8f

Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML v…

Published Aug 24, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

References

20060815 OneOrZero Helpdesk V1.6.4.1 susceptible to SQL injection and XSS mailing-list
1448 third-party-advisory