CVE-2006-0806
published 2006-02-21CVE-2006-0806: Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web…
PriorityP421medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
5.87%
92.3th percentile
Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page parameter in adodb-pager.inc.php and (2) other unspecified vectors related to PHP_SELF.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cacti | cacti | >= 0 < 0.8.6d-1 | 0.8.6d-1 |
| cacti | cacti | >= 0 < 0.8.6d-1 | 0.8.6d-1 |
| cacti | cacti | >= 0 < 0.8.6d-1 | 0.8.6d-1 |
| cacti | cacti | >= 0 < 0.8.6d-1 | 0.8.6d-1 |
| debian | cacti | < cacti 0.8.6d-1 (bookworm) | cacti 0.8.6d-1 (bookworm) |
| debian | libphp-adodb | < cacti 0.8.6d-1 (bookworm) | cacti 0.8.6d-1 (bookworm) |
| john_lim | adodb | — | — |
| john_lim | adodb | — | — |
| john_lim | adodb | — | — |
| john_lim | adodb | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
vendor_debian4.3MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-44cj-54hp-jr6f: Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4
ghsa_unreviewed·2022-05-01
CVE-2006-0806 [MEDIUM] CWE-79 GHSA-44cj-54hp-jr6f: Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4
Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page parameter in adodb-pager.inc.php and (2) other unspecified vectors related to PHP_SELF.
OSV
CVE-2006-0806: Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4
osv·2006-02-21·CVSS 4.3
CVE-2006-0806 [MEDIUM] CVE-2006-0806: Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4
Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page parameter in adodb-pager.inc.php and (2) other unspecified vectors related to PHP_SELF.
Debian
CVE-2006-0806: cacti - Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in mu...
vendor_debian·2006·CVSS 4.3
CVE-2006-0806 [MEDIUM] CVE-2006-0806: cacti - Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in mu...
Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page parameter in adodb-pager.inc.php and (2) other unspecified vectors related to PHP_SELF.
Scope: local
bookworm: resolved (fixed in 0.8.6d-1)
bullseye: resolved (fixed in 0.8.6d-1)
forky: resolved (fixed in 0.8.6d-1)
sid: resolved (fixed in 0.8.6d-1)
trixie: resolved (fixed in 0.8.6d-1)
No detection rules found.
No writeups or analysis indexed.
http://phpesp.cvs.sourceforge.net/phpesp/phpESP/admin/include/lib/adodb/adodb-pager.inc.php?r1=1.1&r2=1.2http://secunia.com/advisories/18928http://secunia.com/advisories/19555http://secunia.com/advisories/19590http://secunia.com/advisories/19591http://secunia.com/advisories/19691http://securityreason.com/securityalert/452http://sourceforge.net/project/shownotes.php?release_id=419843&group_id=8956http://www.debian.org/security/2006/dsa-1029http://www.debian.org/security/2006/dsa-1030http://www.debian.org/security/2006/dsa-1031http://www.gentoo.org/security/en/glsa/glsa-200604-07.xmlhttp://www.gulftech.org/?node=research&article_id=00101-02182006http://www.osvdb.org/23362http://www.securityfocus.com/archive/1/425393/100/0/threadedhttp://www.securityfocus.com/bid/16720http://www.vupen.com/english/advisories/2006/0664http://www.vupen.com/english/advisories/2006/2021http://phpesp.cvs.sourceforge.net/phpesp/phpESP/admin/include/lib/adodb/adodb-pager.inc.php?r1=1.1&r2=1.2http://secunia.com/advisories/18928http://secunia.com/advisories/19555http://secunia.com/advisories/19590http://secunia.com/advisories/19591http://secunia.com/advisories/19691http://securityreason.com/securityalert/452http://sourceforge.net/project/shownotes.php?release_id=419843&group_id=8956http://www.debian.org/security/2006/dsa-1029http://www.debian.org/security/2006/dsa-1030http://www.debian.org/security/2006/dsa-1031http://www.gentoo.org/security/en/glsa/glsa-200604-07.xmlhttp://www.gulftech.org/?node=research&article_id=00101-02182006http://www.osvdb.org/23362http://www.securityfocus.com/archive/1/425393/100/0/threadedhttp://www.securityfocus.com/bid/16720http://www.vupen.com/english/advisories/2006/0664http://www.vupen.com/english/advisories/2006/2021
2006-02-21
Published