CVE-2006-1701 | Vulnerability Database | Aqua Security

Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitrary web script or HTML via the page parameter to load.php.

Affected Software

Name	Vendor	Start Version	End Version
Shadowed_portal	Shadowed_portal	*	5.7d2 (including)

References

http://liz0zim.no-ip.org/shad0w.txt
http://secunia.com/advisories/19595
http://securityreason.com/securityalert/685
http://www.securityfocus.com/archive/1/430376/100/0/threaded
http://www.securityfocus.com/bid/17430
http://www.vupen.com/english/advisories/2006/1286
https://exchange.xforce.ibmcloud.com/vulnerabilities/25716
http://liz0zim.no-ip.org/shad0w.txt
http://secunia.com/advisories/19595
http://securityreason.com/securityalert/685
http://www.securityfocus.com/archive/1/430376/100/0/threaded
http://www.securityfocus.com/bid/17430
http://www.vupen.com/english/advisories/2006/1286
https://exchange.xforce.ibmcloud.com/vulnerabilities/25716

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-1701
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html