CVE-2006-2800
Unak Cms < 1.5_rc2 - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in Unak CMS 1.5 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u_a or (2) u_s parameters. NOTE: this might be resultant from SQL injection.
References (5)
Scores
EPSS
0.0084
EPSS Percentile
74.5%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
unak/unak_cms
< 1.5_rc2
Timeline
Published
Jun 03, 2006
Tracked Since
Feb 18, 2026