CVE-2006-3051

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-06-16 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to inject arbitrary script code or HTML via the page parameter.

Affected products

Six Offene Systeme Gmbh Sixcms: through 6.0

References

http://secunia.com/advisories/20655
http://securityreason.com/securityalert/1101
http://securitytracker.com/id?1016282
http://www.majorsecurity.de/advisory/major_rls17.txt
http://www.securityfocus.com/archive/1/437047/100/0/threaded
http://www.securityfocus.com/archive/1/437639/100/0/threaded
http://www.securityfocus.com/bid/18393
http://www.vupen.com/english/advisories/2006/2386
https://exchange.xforce.ibmcloud.com/vulnerabilities/27108
http://secunia.com/advisories/20655
http://securityreason.com/securityalert/1101
http://securitytracker.com/id?1016282

Get alerted when CVE-2006-3051 or the next vulnerability affects your stack