VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 28, 2006· Updated Jun 16, 2026

CVE-2006-5059

CVE-2006-5059

Description

Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to (1) dosearch.php, (2) postlist.php, (3) showmembers.php, (4) faq_english.php, (5) online.php, (6) login.php, (7) newuser.php, (8) wwwthreads.php, (9) search.php, or (10) postlist.php.

Affected products

4
  • Wired Community Software/Wwwthreads3 versions
    cpe:2.3:a:wired_community_software:wwwthreads:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:wired_community_software:wwwthreads:*:*:*:*:*:*:*:*range: <=5.4.2
    • cpe:2.3:a:wired_community_software:wwwthreads:5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:wired_community_software:wwwthreads:rc3:*:*:*:*:*:*:*
  • WWWThreads/WWWThreads RC 3llm-fuzzy
    Range: <=5.4.2

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.