Unscored severity · published Sep 13, 2006
CVE-2006-4751
Cross-site scripting (XSS) vulnerability in index.php in Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in index.php in Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the errcode parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EH
Expandable Home Page Cms · Laurentiu Matei
0.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4751
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4751
Vendor Advisory
http://secunia.com/advisories/21877
securityreason.com
http://securityreason.com/securityalert/1565
Exploit
http://securitytracker.com/id?1016823
www.securityfocus.com
http://www.securityfocus.com/archive/1/445727/100/0/threaded
Exploit
http://www.securityfocus.com/bid/19948
www.vupen.com
http://www.vupen.com/english/advisories/2006/3560
More from Expandable Home Page Cms
–
CVE-2006-4752
Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to obtain the installation path via a query to the engine module, probably with an invalid action…