CVE-2006-1216

Published: Mar 14, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Affected (6)

Products: Runcms: Runcms

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Runcms Runcms	Version 1.1
Runcms Runcms	Version 1.1a
Runcms Runcms	Version 1.2
Runcms Runcms	Version 1.3a2
Runcms Runcms	Version 1.3a5
Runcms Runcms	Version 1.3a

References (12)

http://secunia.com/advisories/18997

Source: cve@mitre.org

PatchVendor Advisory

http://securityreason.com/securityalert/474

Source: cve@mitre.org

http://www.kapda.ir/advisory-280.html

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/23823

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/426829

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/16970

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/18997

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://securityreason.com/securityalert/474

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kapda.ir/advisory-280.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.osvdb.org/23823

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/426829

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/bid/16970

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.