Unrated severityNVD Advisory· Published Jul 10, 2006· Updated Jun 16, 2026
CVE-2006-3494
CVE-2006-3494
Description
Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the (1) cat_id parameter to (a) view_classifieds.php; (2) id parameter in (b) view_ad.php; (3) event_id parameter in (c) view_event.php, (d) delete_event.php, and (e) edit_event.php; and (4) group_id in (f) view_group.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:vastal_i-tech:buddy_zone:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vastal_i-tech:buddy_zone:*:*:*:*:*:*:*:*range: <=1.0.1
- (no CPE)range: 1.0.1
Patches
Vulnerability mechanics
References
20- www.osvdb.org/26979nvdExploit
- www.osvdb.org/26980nvdExploit
- www.osvdb.org/26981nvdExploit
- www.osvdb.org/26982nvdExploit
- www.osvdb.org/26983nvdExploit
- www.osvdb.org/26984nvdExploit
- www.osvdb.org/26985nvdExploit
- secunia.com/advisories/20933nvdVendor Advisory
- www.vupen.com/english/advisories/2006/2645nvdVendor Advisory
- securityreason.com/securityalert/1209nvd
- www.osvdb.org/26988nvd
- www.osvdb.org/26989nvd
- www.osvdb.org/26990nvd
- www.osvdb.org/26991nvd
- www.osvdb.org/26992nvd
- www.osvdb.org/26993nvd
- www.securityfocus.com/archive/1/438868/100/0/threadednvd
- www.securityfocus.com/archive/1/440144/100/100/threadednvd
- www.securityfocus.com/bid/18759nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27514nvd
News mentions
0No linked articles in our index yet.