CVE-2006-3558: XSS

Published Jul 13, 2006

Updated

Multiple cross-site scripting (XSS) vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to inject arbitrary web script or HTML via (1) the judulartikel parameter in teman.php and (2) the title of an article sent to admin, which is displayed when unauthenticated users visit index.php.

Affected Software

1 affected component

Arif Supriyanto auraCMS=1.62

Event History

Jul 13, 2006

CVE Published

12:05 AM

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3558?

CVE-2006-3558 is considered a medium severity vulnerability due to the potential for cross-site scripting attacks.

How do I fix CVE-2006-3558?

To fix CVE-2006-3558, you should sanitize user inputs for the judul_artikel parameter in teman.php and other relevant fields to prevent XSS.

Who is affected by CVE-2006-3558?

CVE-2006-3558 affects users of auraCMS version 1.62.

What type of vulnerability is CVE-2006-3558?

CVE-2006-3558 is classified as a cross-site scripting (XSS) vulnerability.

Can CVE-2006-3558 be exploited remotely?

Yes, CVE-2006-3558 can be exploited remotely by attackers injecting malicious scripts.