CVE-2006-3927

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-07-31 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitrary web script or HTML via the advsrc parameter.

Affected products

Php Pro Bid: 5.24

References

http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html
http://secunia.com/advisories/21201
http://securityreason.com/securityalert/1298
http://securitytracker.com/id?1016595
http://www.osvdb.org/27544
http://www.securityfocus.com/bid/19158
https://exchange.xforce.ibmcloud.com/vulnerabilities/28030
http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html
http://secunia.com/advisories/21201
http://securityreason.com/securityalert/1298
http://securitytracker.com/id?1016595
http://www.osvdb.org/27544

Get alerted when CVE-2006-3927 or the next vulnerability affects your stack