CVE-2006-1580

Published: Apr 2, 2006Modified: Apr 16, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Bugzero 4.3.1 and other versions allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter in query.jsp and (2) entryId parameter in edit.jsp.

Affected (1)

Products: Websina: Bugzero

Websina

1 product

Bugzero

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Websina Bugzero	version ≤ 4.3.1

References (14)

http://pridels0.blogspot.com/2006/04/bugzero-xss-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/19492

Source: cve@mitre.org

http://www.osvdb.org/24328

Source: cve@mitre.org

http://www.osvdb.org/24329

Source: cve@mitre.org

http://www.securityfocus.com/bid/17351

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1195

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25601

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/04/bugzero-xss-vuln.html