CVE-2006-2367

Cross-site scripting (XSS) vulnerability in index.php in Clansys (aka Clanpage System) 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the func parameter in a search function.

🔗 References (12)

• cve@mitrehttp://archives.neohapsis.com/archives/bugtraq/2006-04/0238.html
• cve@mitrehttp://secunia.com/advisories/19609
• cve@mitrehttp://securityreason.com/securityalert/892
• cve@mitrehttp://securitytracker.com/id?1015934
• cve@mitrehttp://soot.shabgard.org/bugs/Clansys.txt
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/25783
• af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2006-04/0238.html
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19609
• af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/892
• af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015934
• af854a3a-2127-422b-91ae-364da2661108http://soot.shabgard.org/bugs/Clansys.txt
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/25783