CVE-2006-5106: XSS
Published Oct 3, 2006
·Updated
Cross-site scripting (XSS) vulnerability in FacileForms before 1.4.7 for Mambo and Joomla!, when either registerglobals or RGEMULATION is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
16 affected components
FacileForms FacileForms=1.2
FacileForms FacileForms=1.2.1
FacileForms FacileForms=1.2.2
FacileForms FacileForms=1.2.3
FacileForms FacileForms=1.2.4
FacileForms FacileForms=1.2.5
FacileForms FacileForms=1.2.6
FacileForms FacileForms=1.3
FacileForms FacileForms=1.3.1
FacileForms FacileForms=1.4
FacileForms FacileForms=1.4.1
FacileForms FacileForms=1.4.2
FacileForms FacileForms=1.4.3
FacileForms FacileForms=1.4.4
FacileForms FacileForms=1.4.5
FacileForms FacileForms=1.4.6g
Remediation
Patch Available
Patch Available
Event History
Oct 3, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:03 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2006-5106?
CVE-2006-5106 is classified as a high severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2006-5106?
To fix CVE-2006-5106, upgrade to FacileForms version 1.4.7 or later and disable register_globals or RG_EMULATION.
3
What versions are affected by CVE-2006-5106?
CVE-2006-5106 affects all versions of FacileForms prior to 1.4.7.
4
What type of attacks can CVE-2006-5106 allow?
CVE-2006-5106 allows remote attackers to inject arbitrary web script or HTML into web pages.
5
Is CVE-2006-5106 specific to any CMS?
Yes, CVE-2006-5106 specifically affects the FacileForms component used in Mambo and Joomla! CMS.