CVE-2006-1544

Published: Mar 30, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in news.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorkomentarza and (2) tresckomentarza parameters.

Affected (1)

Products: Vscripts: Vnews

Vscripts

1 product

Vnews

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vscripts Vnews	Version 1.2

References (14)

http://secunia.com/advisories/19435

Source: cve@mitre.org

http://www.evuln.com/vulns/112

Source: cve@mitre.org

http://www.osvdb.org/24275

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/430674/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17317

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1173

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25530

Source: cve@mitre.org

http://secunia.com/advisories/19435