CVE-2006-2066

mkportal 1.1 Rc1 and earlier - Cross-Site Scripting via pm_popup.php Parameters

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) u1, (2) m1, (3) m2, (4) m3, (5) m4 parameters.

Exploits (1)

exploitdb WORKING POC VERIFIED
by HanowarS · textwebappsphp
https://www.exploit-db.com/exploits/28716

References (11)

Core 11
Core References
Exploit, Vendor Advisory x_refsource_misc
http://www.nukedx.com/?viewdoc=26
Exploit vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015977
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/447195/100/0/threaded
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/447303/100/0/threaded
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1485
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/801
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17651
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20232
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/24901
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19786
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/431759/100/0/threaded

Scores

EPSS 0.0971
EPSS Percentile 93.0%

Details

CWE
CWE-79
Status published
Products (1)
mkportal/mkportal 1.1_rc1
Published Apr 27, 2006
Tracked Since Feb 18, 2026