CVE-2006-1965
published 2006-04-21CVE-2006-1965: Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML…
PriorityP422medium5.8CVSS 2.0
AVNACMAuNCPIPAN
EXPLOIT
EPSS
2.47%
82.5th percentile
Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) onuser, (2) pass, (3) chatsys, (4) room, (5) username, and (6) to parameters in (a) sendim.cgi; the (7) username parameter in (b) imessage.cgi; the (8) password parameter in (c) login.cgi; and the (9) cat_id parameter in (d) viewcat.cgi.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| aasi_media | net_clubs_pro | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Net Clubs Pro 4.0 - 'sendim.cgi' Multiple Cross-Site Scripting Vulnerabilities
exploitdb·2006-04-20
CVE-2006-1965 Net Clubs Pro 4.0 - 'sendim.cgi' Multiple Cross-Site Scripting Vulnerabilities
Net Clubs Pro 4.0 - 'sendim.cgi' Multiple Cross-Site Scripting Vulnerabilities
---
source: https://www.securityfocus.com/bid/17622/info
Net Clubs Pro is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input.
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Net Clubs Pro 4.0 is vulnerable to these issues. Other versions may be affected as well.
http://www.example.com/cgi-bin/netclubs//vchat/scripts/sendim.cgi?onuser=[XSS]
http://www.example.com/cgi-bin/netclubs//vchat/scripts/sendim.cgi?onuser
Exploit-DB
Net Clubs Pro 4.0 - 'imessage.cgi?Username' Cross-Site Scripting
exploitdb·2006-04-20
CVE-2006-1965 Net Clubs Pro 4.0 - 'imessage.cgi?Username' Cross-Site Scripting
Net Clubs Pro 4.0 - 'imessage.cgi?Username' Cross-Site Scripting
---
source: https://www.securityfocus.com/bid/17622/info
Net Clubs Pro is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input.
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Net Clubs Pro 4.0 is vulnerable to these issues. Other versions may be affected as well.
http://www.example.com/cgi-bin/netclubs//vchat/scripts/imessage.cgi?toto=&to=&sentby=&fromuser=r0t&command=changefont&username=[XSS]
Exploit-DB
Net Clubs Pro 4.0 - 'login.cgi?Password' Cross-Site Scripting
exploitdb·2006-04-20
CVE-2006-1965 Net Clubs Pro 4.0 - 'login.cgi?Password' Cross-Site Scripting
Net Clubs Pro 4.0 - 'login.cgi?Password' Cross-Site Scripting
---
source: https://www.securityfocus.com/bid/17622/info
Net Clubs Pro is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input.
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Net Clubs Pro 4.0 is vulnerable to these issues. Other versions may be affected as well.
http://www.example.com/cgi-bin/netclubs//login.cgi?username=r0t&password=[XSS]
No writeups or analysis indexed.
http://pridels0.blogspot.com/2006/04/net-clubs-pro-xss-vuln.htmlhttp://secunia.com/advisories/19651http://www.osvdb.org/24754http://www.osvdb.org/24755http://www.osvdb.org/24756http://www.osvdb.org/24757http://www.securityfocus.com/bid/17622http://www.vupen.com/english/advisories/2006/1436https://exchange.xforce.ibmcloud.com/vulnerabilities/25957http://pridels0.blogspot.com/2006/04/net-clubs-pro-xss-vuln.htmlhttp://secunia.com/advisories/19651http://www.osvdb.org/24754http://www.osvdb.org/24755http://www.osvdb.org/24756http://www.osvdb.org/24757http://www.securityfocus.com/bid/17622http://www.vupen.com/english/advisories/2006/1436https://exchange.xforce.ibmcloud.com/vulnerabilities/25957
2006-04-21
Published