Unscored CVE-2006-4739 EUVD-2006-4726GHSA-fwcv-cfvp-6xvf

Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML, as demonst…

Published Sep 13, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the OriginalImageData parameter to phpthumb.php.

References

19303 vdb-entry
jetboxcms-phpthumb-xss(28842) vdb-entry
1562 third-party-advisory
20060909 Multible injections and vulnerabilities in Jetbox CMS mailing-list