Unrated severityNVD Advisory· Published Mar 9, 2006· Updated Jun 16, 2026
CVE-2006-1082
CVE-2006-1082
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the gamename parameter in tellafriend.php, (2) the login_status parameter in loginbox.php, (3) the submissionstatus parameter in index.php, the (4) cell_title_background_color and (5) browse_cat_name parameters in browse.php, the (6) gamefile parameter in displaygame.php, and (7) possibly other parameters in unspecified PHP scripts.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=2.0+ 1 more
- (no CPE)range: <=2.0
- cpe:2.3:a:phparcadescript:phparcadescript:2.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.