Unrated severityNVD Advisory· Published Jun 12, 2006· Updated Apr 16, 2026

CVE-2006-2956

Description

Multiple cross-site scripting (XSS) vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) searchword parameter to search.php or (2) siteurl parameter to add.php.

Affected products

Skoom/I.list
cpe:2.3:a:skoom:i.list:*:*:*:*:*:*:*:*
Range: <=1.5_beta

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/20547nvdVendor Advisory
securitytracker.com/idnvd
www.majorsecurity.de/advisory/major_rls10.txtnvd
www.securityfocus.com/bid/18355nvd
www.vupen.com/english/advisories/2006/2252nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000