CVE-2006-0521

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-02-02 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via certain manipulations of the query parameter, as demonstrated using an IMG SRC tag.

Affected products

Browsercrm: all versions

References

http://secunia.com/advisories/18658
http://securityreason.com/securityalert/393
http://www.osvdb.org/22841
http://www.securityfocus.com/archive/1/423546/100/0/threaded
http://www.securityfocus.com/bid/16435
http://www.vupen.com/english/advisories/2006/0391
https://exchange.xforce.ibmcloud.com/vulnerabilities/24390
http://secunia.com/advisories/18658
http://securityreason.com/securityalert/393
http://www.osvdb.org/22841
http://www.securityfocus.com/archive/1/423546/100/0/threaded
http://www.securityfocus.com/bid/16435

Get alerted when CVE-2006-0521 or the next vulnerability affects your stack