Unscored severity · published Mar 28, 2006
CVE-2006-1425
Cross-site scripting (XSS) vulnerability in track.php in phpmyfamily 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter
–
CVSS
2.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in track.php in phpmyfamily 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phpmyfamily · Phpmyfamily
1.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1425
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1425
marc.info
http://marc.info/?l=full-disclosure&m=114344921211241&w=2
secunia.com
http://secunia.com/advisories/19409
securityreason.com
http://securityreason.com/securityalert/636
www.osvdb.org
http://www.osvdb.org/24166
www.securityfocus.com
http://www.securityfocus.com/archive/1/428901/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/17278
More from Phpmyfamily
–
CVE-2005-0841
SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0…