CVE-2006-0984 | Vulnerability Database | Aqua Security

Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the gTopNombre parameter.

Affected Software

Name	Vendor	Start Version	End Version
Topo	Ej3	2.2.178 (including)	2.2.178 (including)

References

http://secunia.com/advisories/19070
http://securityreason.com/securityalert/511
http://www.osvdb.org/23541
http://www.securityfocus.com/archive/1/426318/100/0/threaded
http://www.securityfocus.com/bid/16879
http://www.vupen.com/english/advisories/2006/0775
https://exchange.xforce.ibmcloud.com/vulnerabilities/24980
http://secunia.com/advisories/19070
http://securityreason.com/securityalert/511
http://www.osvdb.org/23541
http://www.securityfocus.com/archive/1/426318/100/0/threaded
http://www.securityfocus.com/bid/16879
http://www.vupen.com/english/advisories/2006/0775
https://exchange.xforce.ibmcloud.com/vulnerabilities/24980

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-0984
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html