CVE-2006-5037

Published: Sep 27, 2006Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sq_content_src parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that "The vendor does not consider this a vulnerability.

Affected (8)

Products: Squiz: Mysource Matrix

Squiz

1 product

Mysource Matrix

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Squiz Mysource Matrix	Version 3.10.1
Squiz Mysource Matrix	Version 3.10
Squiz Mysource Matrix	Version 3.8.2
Squiz Mysource Matrix	Version 3.8.3
Squiz Mysource Matrix	Version 3.8.4
Squiz Mysource Matrix	Version 3.8.5
Squiz Mysource Matrix	Version 3.8.6a
Squiz Mysource Matrix	Version 3.8