20141Third-party advisory
http://secunia.com/advisories/20141 CVE-2006-2425
PHPRemoteView - 'PRV.php' Multiple Cross-Site Scripting Vulnerabilities
Record summary
CVE-2006-2425 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Multiple cross-site scripting (XSS) vulnerabilities in PRV.php in PhpRemoteView, possibly 2003-10-23 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) f, (2) d, and (3) ref parameters, and the (4) "MAKE DIR" and (5) "Full file name" fields.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPHPRemoteView - 'PRV.php' Multiple Cross-Site Scripting VulnerabilitiesExploitDB exploitby SootNot analyzed1 file
References
9902Third-party advisory
http://securityreason.com/securityalert/902 soot.shabgard.org
http://soot.shabgard.org/bugs/phpremoteview.txt 25572vdb entry
http://www.osvdb.org/25572 20060516 PhpRemoteView Multiple Xss Vulnerabilitiesmailing list
http://www.securityfocus.com/archive/1/434118/100/0/threaded 17994vdb entry
http://www.securityfocus.com/bid/17994 ADV-2006-1844vdb entry
http://www.vupen.com/english/advisories/2006/1844 phpremoteview-prv-xss(26473)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/26473 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-2425