CVE-2006-1504

Published: Mar 30, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0 (aka Arab Dynamic Portal or ADP) stable allow remote attackers to inject arbitrary web script or HTML via the title parameter in (1) online.php and (2) download.php.

Affected (1)

Products: Arab Portal: Arab Portal

Arab Portal

1 product

Arab Portal

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Arab Portal Arab Portal	Version 2.0

References (16)

http://secunia.com/advisories/19445

Source: cve@mitre.org

ExploitVendor Advisory

http://securityreason.com/securityalert/673

Source: cve@mitre.org

http://www.osvdb.org/24220

Source: cve@mitre.org

http://www.osvdb.org/24221

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/429109/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17285

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1150

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25515

Source: cve@mitre.org

http://secunia.com/advisories/19445