CVE-2006-6356

Published: Dec 7, 2006Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in templates/link_temp.php in PHPNews 1.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) id, (3) subject, (4) username, or (5) time parameter.

Affected (1)

Products: Phpnews: Phpnews

Phpnews

1 product

Phpnews

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Phpnews Phpnews	Version 1.3

References (12)

http://secunia.com/advisories/23214

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1994

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/453321/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21404

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/4826

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30664

Source: cve@mitre.org

http://secunia.com/advisories/23214