CVE-2006-2518: XSS
Published May 22, 2006
·Updated
Cross-site scripting (XSS) vulnerability in phpwcms 1.2.5-DEV allows remote attackers to inject arbitrary web script or HTML via the BL[becntplainhtml] parameter to include/inctmpl/content/cnt6.inc.php.
Affected Software
1 affected component
Phpwcms Phpwcms=1.2.5_dev
Event History
May 22, 2006
CVE Published
10:02 PM
May 23, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2518?
CVE-2006-2518 is classified as a high severity vulnerability due to the potential for remote code execution via XSS.
2
How do I fix CVE-2006-2518?
To fix CVE-2006-2518, upgrade to phpwcms version 1.2.5-DEV or later that addresses this vulnerability.
3
What impact does CVE-2006-2518 have on my website?
CVE-2006-2518 allows attackers to inject arbitrary web scripts or HTML, potentially compromising the integrity and security of your website.
4
Is CVE-2006-2518 present in all versions of phpwcms?
No, CVE-2006-2518 specifically affects phpwcms version 1.2.5-DEV.
5
How can I detect CVE-2006-2518 in my system?
You can detect CVE-2006-2518 by scanning for the vulnerable version of phpwcms and reviewing logs for signs of XSS attacks.