CVE-2006-2956

Published: Jun 12, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) searchword parameter to search.php or (2) siteurl parameter to add.php.

Affected (1)

Products: Skoom: I.list

Skoom

1 product

I.list

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Skoom I.list	version ≤ 1.5_beta

References (10)

http://secunia.com/advisories/20547

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1016274

Source: cve@mitre.org

http://www.majorsecurity.de/advisory/major_rls10.txt

Source: cve@mitre.org

http://www.securityfocus.com/bid/18355

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2252

Source: cve@mitre.org

http://secunia.com/advisories/20547