VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 12, 2006· Updated Jun 16, 2026

CVE-2006-2951

CVE-2006-2951

Description

Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.10 and earlier allow remote attackers to inject arbitrary web script and HTML via the (1) Titlesitename or (2) sitename parameter to (a) header.php, (3) nuke_url parameter to (b) meta/meta.php, (4) forum parameter to (c) viewforum.php, (5) post_id, (6) forum, (7) topic, or (8) arbre parameter to (d) editpost.php, or (9) uname or (10) email parameter to (e) user.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Npds/Npds3 versions
    cpe:2.3:a:npds:npds:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:npds:npds:*:*:*:*:*:*:*:*range: <=5.10
    • cpe:2.3:a:npds:npds:4.8:*:*:*:*:*:*:*
    • cpe:2.3:a:npds:npds:5.0:*:*:*:*:*:*:*
  • Npds/Net Portal Dynamic Systemllm-fuzzy
    Range: <=5.10

Patches

Vulnerability mechanics

References

12

News mentions

0

No linked articles in our index yet.