CVE-2006-5799

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-11-08 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the (1) contid or (2) search parameters.

Affected products

Xenis.Creator Cms: all versions

References

http://marc.info/?l=bugtraq&m=116266150514762&w=2
http://secunia.com/advisories/22716
http://securitytracker.com/id?1017162
http://www.majorsecurity.de/index_2.php?major_rls=major_rls31
http://www.securityfocus.com/bid/20908
http://www.vupen.com/english/advisories/2006/4470
https://exchange.xforce.ibmcloud.com/vulnerabilities/30019
http://marc.info/?l=bugtraq&m=116266150514762&w=2
http://secunia.com/advisories/22716
http://securitytracker.com/id?1017162
http://www.majorsecurity.de/index_2.php?major_rls=major_rls31
http://www.securityfocus.com/bid/20908

Get alerted when CVE-2006-5799 or the next vulnerability affects your stack