Unscored CVE-2006-4665 EUVD-2006-4653GHSA-x62m-76fw-wfvv

Cross-site scripting (XSS) vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML v…

Published Sep 9, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML via the ind parameter, possibly related to the PHP_SELF variable. NOTE: Some details are obtained from third party information.

References

ADV-2006-3518 vdb-entry
mkportal-index-xss(28812) vdb-entry
21821 third-party-advisory
20060907 xxs in MKPortal M1.1 mailing-list
1534 third-party-advisory