CVE-2006-6366P4MEDIUMCVSS 6.8PoCv0.97.3·v2.0+11 more2006-12-07
CVE-2006-6366 [MEDIUM] CVE-2006-6366: Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus He
Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 through 2.7, 3.2.1, and 3.3 allows remote attackers to inject arbitrary web script or HTML via the js parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
nvd