CVE-2006-3024

Published: Jun 15, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in EvGenius Counter 3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) monthly.php and (2) daily.php.

Affected (1)

Products: Evgenius: Evgenius Counter

Evgenius

1 product

Evgenius Counter

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Evgenius Evgenius Counter	version ≤ 3.4

References (14)

http://pridels0.blogspot.com/2006/06/evgenius-counter-xss-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/20546

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1016281

Source: cve@mitre.org

http://www.osvdb.org/26423

Source: cve@mitre.org

http://www.osvdb.org/26424

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2309

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27078

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/06/evgenius-counter-xss-vuln.html