First published: Wed Nov 22 2006(Updated: )
Cross-site scripting (XSS) vulnerability in list.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the FADDR parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
F-art Agency Blog Cms | <=4.1.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-6035 is considered a moderate severity cross-site scripting (XSS) vulnerability.
To fix CVE-2006-6035, upgrade to BLOG:CMS version 4.1.4 or later which addresses this vulnerability.
Users of BLOG:CMS versions 4.1.3 and earlier are affected by CVE-2006-6035.
CVE-2006-6035 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary scripts.
Yes, CVE-2006-6035 can potentially lead to data theft if an attacker successfully exploits the XSS vulnerability.