CVE-2006-6768

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-27 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) main parameter.

Affected products

Pwp Technologies The Classified Ad System: all versions

References

http://secunia.com/advisories/23289
http://securityreason.com/securityalert/2075
http://www.securityfocus.com/archive/1/452194/100/200/threaded
http://www.securityfocus.com/bid/21198
https://exchange.xforce.ibmcloud.com/vulnerabilities/30445
http://secunia.com/advisories/23289
http://securityreason.com/securityalert/2075
http://www.securityfocus.com/archive/1/452194/100/200/threaded
http://www.securityfocus.com/bid/21198
https://exchange.xforce.ibmcloud.com/vulnerabilities/30445

Get alerted when CVE-2006-6768 or the next vulnerability affects your stack