CVE-2006-2390

Ozjournals - XSS

Title source: rule
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in OZJournals 1.2 allows remote attackers to inject arbitrary web script or HTML via the vname parameter in the comments functionality.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Kiki · textwebappsphp
https://www.exploit-db.com/exploits/27859

References (5)

Core 5
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1781
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17954
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20091
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/26403

Scores

EPSS 0.0053
EPSS Percentile 67.3%

Details

Status published
Products (1)
ozjournals/ozjournals 1.2
Published May 16, 2006
Tracked Since Feb 18, 2026