CVE-2006-6096

Dotnetindex Active News Manager - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in activenews_search.asp in ActiveNews Manager allows remote attackers to inject arbitrary web script or HTML via the query parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by laurent gaffie · textwebappsasp
https://www.exploit-db.com/exploits/29088

Scores

EPSS 0.0320
EPSS Percentile 86.8%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

dotnetindex/active_news_manager

Timeline

Published Nov 24, 2006
Tracked Since Feb 18, 2026