Unscored severity · published Mar 31, 2006
CVE-2006-1558
Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote attackers to inject arbitrary web script or HTML via the search parameter
–
CVSS
1.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PS
Php Script Index · Php
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1558
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1558
Exploit
http://osvdb.org/ref/24/24243-script_index.txt
Vendor Advisory
http://secunia.com/advisories/19443
Exploit
http://www.osvdb.org/24243
www.securityfocus.com
http://www.securityfocus.com/bid/17297
www.vupen.com
http://www.vupen.com/english/advisories/2006/1158
More from Php Script Index
–
CVE-2006-1559
SQL injection vulnerability in PHP Script Index allows remote attackers to execute arbitrary SQL commands via the search parameter