Unrated severityNVD Advisory· Published Jul 6, 2006· Updated Apr 16, 2026
CVE-2006-3358
CVE-2006-3358
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) words, (2) id, (3) cat_id, and (4) tim parameters, which are not sanitized before being returned in an error page. NOTE: it is possible that some of these vectors are resultant from an SQL injection issue.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- secunia.com/advisories/20943nvdVendor Advisory
- securityreason.com/securityalert/1188nvd
- www.osvdb.org/26976nvd
- www.osvdb.org/26977nvd
- www.securityfocus.com/archive/1/438858/100/0/threadednvd
- www.securityfocus.com/bid/18726nvd
- www.vupen.com/english/advisories/2006/2640nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27508nvd
News mentions
0No linked articles in our index yet.