CVE-2006-1144

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-10 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML via (1) the user parameter in deleteuser.php and (2) the hits parameter in viewuser.php.

Affected products

David Ravenscroft Hithost: 1.0.0

References

http://secunia.com/advisories/19155
http://www.osvdb.org/23757
http://www.osvdb.org/23758
http://www.securityfocus.com/archive/1/426931/100/0/threaded
http://www.securityfocus.com/bid/17025
http://www.vupen.com/english/advisories/2006/0886
https://exchange.xforce.ibmcloud.com/vulnerabilities/25105
http://secunia.com/advisories/19155
http://www.osvdb.org/23757
http://www.osvdb.org/23758
http://www.securityfocus.com/archive/1/426931/100/0/threaded
http://www.securityfocus.com/bid/17025

Get alerted when CVE-2006-1144 or the next vulnerability affects your stack