CVE-2006-0885 | Vulnerability Database | Aqua Security

Cross-site scripting (XSS) vulnerability in show_news.php in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the show parameter.

Affected Software

Name	Vendor	Start Version	End Version
Cutenews	Cutephp	1.4.1 (including)	1.4.1 (including)

References

http://myimei.com/security/2006-02-20/cutenews141addcommentforprotectedusernamesxss-attack.html
http://secunia.com/advisories/18981
http://www.osvdb.org/23400
http://www.securityfocus.com/archive/1/425583
http://www.securityfocus.com/bid/16740
http://www.vupen.com/english/advisories/2006/0685
https://exchange.xforce.ibmcloud.com/vulnerabilities/24835
http://myimei.com/security/2006-02-20/cutenews141addcommentforprotectedusernamesxss-attack.html
http://secunia.com/advisories/18981
http://www.osvdb.org/23400
http://www.securityfocus.com/archive/1/425583
http://www.securityfocus.com/bid/16740
http://www.vupen.com/english/advisories/2006/0685
https://exchange.xforce.ibmcloud.com/vulnerabilities/24835

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-0885
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html