CVE-2006-3051

Published: Jun 16, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to inject arbitrary script code or HTML via the page parameter.

Affected (1)

Products: Six Offene Systeme Gmbh: Sixcms

Six Offene Systeme Gmbh

1 product

Sixcms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Six Offene Systeme Gmbh Sixcms	version ≤ 6.0

References (18)

http://secunia.com/advisories/20655

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1101

Source: cve@mitre.org

http://securitytracker.com/id?1016282

Source: cve@mitre.org

Exploit

http://www.majorsecurity.de/advisory/major_rls17.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/437047/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/437639/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18393

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/2386

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27108

Source: cve@mitre.org

http://secunia.com/advisories/20655