VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 20, 2006· Updated Jun 16, 2026

CVE-2006-5985

CVE-2006-5985

Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/options.php in Extreme CMS 0.9, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) bg1, (2) bg2, (3) text, or (4) size parameters. NOTE: the provenance of this information is unknown; details are obtained from third party sources.

Affected products

2
  • Extreme CMS/Extreme CMS2 versions
    cpe:2.3:a:extreme_cms:extreme_cms:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:extreme_cms:extreme_cms:*:*:*:*:*:*:*:*range: <=0.9
    • (no CPE)range: <=0.9

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.