Unscored CVE-2006-5144 EUVD-2006-5129GHSA-5ggf-99g5-87vf

Cross-site scripting (XSS) vulnerability in userupload.php in OlateDownload 3.4.0 allows remote attackers to inject arbitrary web script or…

Published Oct 2, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in userupload.php in OlateDownload 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the description_small parameter.

References

1680 third-party-advisory
20060930 OlateDownload 3.4.0 Multiple Vulnerabilities mailing-list
olate-download-userupload-xss(29292) vdb-entry
20278 vdb-entry
22241 third-party-advisory