VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 20, 2006· Updated Jun 16, 2026

CVE-2006-6649

CVE-2006-6649

Description

Cross-site scripting (XSS) vulnerability in display.php in HyperVM 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an encoded frm_action parameter. NOTE: the vendor disputes this issue, but it is not certain whether the dispute is about the severity of the issue, or its existence.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Lxlabs/Hypervm2 versions
    cpe:2.3:a:hypervm:hypervm:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:hypervm:hypervm:*:*:*:*:*:*:*:*range: <=1.2
    • (no CPE)range: <=1.2

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.