CVE-2006-1144

Published: Mar 10, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML via (1) the user parameter in deleteuser.php and (2) the hits parameter in viewuser.php.

Affected (1)

Products: David Ravenscroft: Hithost

David Ravenscroft

1 product

Hithost

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
David Ravenscroft Hithost	Version 1.0.0

References (14)

http://secunia.com/advisories/19155

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/23757

Source: cve@mitre.org

http://www.osvdb.org/23758

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/426931/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17025

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0886

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25105

Source: cve@mitre.org

http://secunia.com/advisories/19155