CVE-2006-2891: XSS
Published Jun 7, 2006
·Updated
Cross-site scripting (XSS) vulnerability in admin/index.php for Pixelpost 1-5rc1-2 and earlier allows remote attackers to inject arbitrary HTML or web script via the loginmessage parameter.
Affected Software
1 affected component
Pixelpost=1.5_rc1
Event History
Jun 7, 2006
CVE Published
10:02 AM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2891?
CVE-2006-2891 is considered to be of medium severity due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2006-2891?
To fix CVE-2006-2891, upgrade to a later version of Pixelpost that addresses this vulnerability.
3
Which versions of Pixelpost are affected by CVE-2006-2891?
CVE-2006-2891 affects Pixelpost versions 1.5_rc1-2 and earlier.
4
What kind of attack does CVE-2006-2891 enable?
CVE-2006-2891 enables remote attackers to perform cross-site scripting (XSS) attacks.
5
What parameter is vulnerable in CVE-2006-2891?
The vulnerable parameter in CVE-2006-2891 is the loginmessage parameter.