Unscored severity · published Mar 14, 2006
CVE-2006-1216
Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web script or HTML via the id parameter
–
CVSS
2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RU
Runcms · Runcms
1.1; 1.1a; 1.2; 1.3a; 1.3a2; 1.3a5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1216
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1216
Patch
http://secunia.com/advisories/18997
securityreason.com
http://securityreason.com/securityalert/474
Exploit
http://www.kapda.ir/advisory-280.html
www.osvdb.org
http://www.osvdb.org/23823
Exploit
http://www.securityfocus.com/archive/1/426829
Exploit
http://www.securityfocus.com/bid/16970
More from Runcms
–
CVE-2010-2852
Cross-site scripting (XSS) vulnerability in modules/headlines/magpierss/scripts/magpie_debug.php in RunCms 2.1, when the Headlines module is enabled, allows remote attackers to…
–
CVE-2009-3815
RunCMS 2M1, when running with certain error_reporting levels, allows remote attackers to obtain sensitive information via (1) the op[] parameter to modules/contact/index.php or…
–
CVE-2009-3814
Static code injection vulnerability in RunCMS 2M1 allows remote authenticated administrators to execute arbitrary PHP code via the "Filter/Banning" feature, as demonstrated by…
–
CVE-2009-3813
Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via the (1) forum parameter to modules/forum/post.php and…
–
CVE-2009-3804
Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via (1) the pid parameter, which…