CVE-2006-1645

Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows remote attackers to inject arbitrary web…

published April 6, 2006

CVSS
—
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows remote attackers to inject arbitrary web script or HTML and gain leverage to execute arbitrary PHP code via the User-Agent HTTP header, which is displayed by admin/modules/general/statistic.php in the administration panel.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02201 · 82.4th percentile
Published
2006-04-06T10:00Z
EPSS history
Timeline
  • 06 APR 10:00Z
    Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows remote attackers to inject arbitrary web…
    cvelistv5