Unrated severityNVD Advisory· Published Nov 6, 2006· Updated Jun 16, 2026

CVE-2006-5770

Description

Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via (1) Bloks, (2) Newnews, (3) lBlok, and (4) foooot parameter in (a) index.php; Newnews, (5) newmsgs, and Bloks parameter in (b) MobileNews.php; Newnews parameter in (c) polls.php; (6) cats parameter in (d) send.php; (7) footer parameter in (e) up.php; and (8) pagenav parameter in (f) cp/index.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/20895nvdExploit
www.osvdb.org/32046nvd
www.osvdb.org/32047nvd
www.osvdb.org/32048nvd
www.osvdb.org/32049nvd
www.osvdb.org/32050nvd
www.osvdb.org/32051nvd
www.securityfocus.com/archive/1/450496/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/30007nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000