Description

Cross-site scripting (XSS) vulnerability in modules/wfdownloads/newlist.php in XOOPS 1.0 allows remote attackers to inject arbitrary web script or HTML via the newdownloadshowdays parameter.

Remediation

References

CVE-2006-5810

Related Vulnerabilities

Serendipity Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-5609)

WordPress 4.2.x Arbitrary File Deletion Vulnerability (4.2 - 4.2.20)

ATutor Improper Privilege Management Vulnerability (CVE-2017-1000003)

WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Security Bypass (4.3.0)

MySQL CVE-2018-3062 Vulnerability (CVE-2018-3062)

Severity

Medium

Classification

CVE-2006-5810

Tags

Missing Update Known Vulnerabilities