CVE-2006-4634

vbzoom - Cross-Site Scripting via UserID Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-4634. PoCs published by Crack_MaN.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in VBZooM due to improper input sanitization. The example URL demonstrates how an attacker could inject arbitrary script code via the UserID parameter.

Description

Cross-site scripting (XSS) vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the UserID parameter, a different vector than CVE-2006-1133 and CVE-2005-2441.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Crack_MaN · textwebappsphp
https://www.exploit-db.com/exploits/28470

The provided text describes a cross-site scripting (XSS) vulnerability in VBZooM due to improper input sanitization. The example URL demonstrates how an attacker could inject arbitrary script code via the UserID parameter.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: VBZooM (version not specified)
No auth needed
Prerequisites: A vulnerable version of VBZooM · User interaction to visit a crafted URL
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/445000/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28719
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16220
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19803
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/1520

Scores

EPSS 0.0164
EPSS Percentile 73.3%

Details

Status published
Products (1)
vbzoom/vbzoom
Published Sep 08, 2006
Tracked Since Feb 18, 2026