Unscored severity · published Dec 10, 2006
CVE-2006-6452
Multiple cross-site scripting (XSS) vulnerabilities in the MyArticles module before 0.6 beta 1, for RunCMS, allow remote attackers to inject arbitrary web script or HTML via…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the MyArticles module before 0.6 beta 1, for RunCMS, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) topics.php, (2) submit.php, and (3) class/calendar.class.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MY
Myarticles · Myarticles
through 0.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6452
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6452
sourceforge.net
http://sourceforge.net/project/shownotes.php?release_id=466097
www.vupen.com
http://www.vupen.com/english/advisories/2006/4777
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/30618
More from Myarticles
–
CVE-2008-2084
SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a…