CVE-2006-5293

Cross-site scripting (XSS) vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the frommethod parameter.

Score6.8
Access VectorNETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactPARTIAL
Published2006-10-16 02:07:00.000-04
Last Modified2018-10-17 05:42:02.000-04

Vulnerable Software List

VendorProductVersions
Phpoutsourcing Noahs Classifieds 1.3

References

SourceLink
SREASON1724
BUGTRAQ20061010 Noah's Classifieds Cross Site Scripting Vulnerability
BID20463
MISChttp://zone14.free.fr/advisories/5/
XFnoahs-classified-frommethod-xss(29448)