CVE-2006-0675 | Vulnerability Database | Aqua Security

Cross-site scripting (XSS) vulnerability in search.php in Siteframe 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the q parameter.

Affected Software

Name	Vendor	Start Version	End Version
Siteframe	Glen_campbell	5.0.1 (including)	5.0.1 (including)

References

http://kiki91.altervista.org/exploit/siteframe5.0.1a_xss.txt
http://secunia.com/advisories/18804
http://siteframe.org/p/xss_vulnerability_in_siteframe_501
http://www.securityfocus.com/archive/1/424844/100/0/threaded
http://www.securityfocus.com/bid/16596
http://www.vupen.com/english/advisories/2006/0533
https://exchange.xforce.ibmcloud.com/vulnerabilities/24649
http://kiki91.altervista.org/exploit/siteframe5.0.1a_xss.txt
http://secunia.com/advisories/18804
http://siteframe.org/p/xss_vulnerability_in_siteframe_501
http://www.securityfocus.com/archive/1/424844/100/0/threaded
http://www.securityfocus.com/bid/16596
http://www.vupen.com/english/advisories/2006/0533
https://exchange.xforce.ibmcloud.com/vulnerabilities/24649

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-0675
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html