Unrated severityNVD Advisory· Published Feb 2, 2006· Updated Jun 16, 2026

CVE-2006-0521

Description

Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via certain manipulations of the query parameter, as demonstrated using an IMG SRC tag.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Browsercrm/Browsercrm2 versions
cpe:2.3:a:browsercrm:browsercrm:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:browsercrm:browsercrm:*:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

secunia.com/advisories/18658nvdVendor Advisory
securityreason.com/securityalert/393nvd
www.osvdb.org/22841nvd
www.securityfocus.com/archive/1/423546/100/0/threadednvd
www.securityfocus.com/bid/16435nvd
www.vupen.com/english/advisories/2006/0391nvd
exchange.xforce.ibmcloud.com/vulnerabilities/24390nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000