CVE-2006-1496

Published: Mar 30, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call.

Affected (1)

Products: Vihor: Vihordesign

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vihor Vihordesign	All versions

References (12)

http://secunia.com/advisories/19403

Source: cve@mitre.org

http://www.attrition.org/pipermail/vim/2006-March/000650.html

Source: cve@mitre.org

http://www.attrition.org/pipermail/vim/2006-March/000651.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/428737

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/17226

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/25483

Source: cve@mitre.org

http://secunia.com/advisories/19403

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.attrition.org/pipermail/vim/2006-March/000650.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.attrition.org/pipermail/vim/2006-March/000651.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/428737

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/17226

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/25483

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.