CVE-2006-1199

daverave Link Bank - XSS

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in iframe.php in daverave Link Bank allows remote attackers to inject arbitrary web script or HTML via the site parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Retard · textwebappsphp
https://www.exploit-db.com/exploits/27367

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17001
Exploit, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19154
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/23751
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25107
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/426932/100/0/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0885

Scores

EPSS 0.0062
EPSS Percentile 70.2%

Details

Status published
Products (1)
daverave/link_bank
Published Mar 14, 2006
Tracked Since Feb 18, 2026