Unrated severityNVD Advisory· Published May 12, 2006· Updated Apr 16, 2026
CVE-2006-2325
CVE-2006-2325
Description
Cross-site scripting (XSS) vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Also, this issue might be resultant from directory traversal.
Affected products
1- cpe:2.3:a:onlyscript.info:online_universal_payment_system_script:*:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5News mentions
0No linked articles in our index yet.