CVE-2006-2015 - CVE House
Back to Database
Status published Low CVE-2006-2015

Cross-site scripting (XSS) vulnerability in SL_site 1.0 allows remote attackers...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in SL_site 1.0 allows remote attackers to inject arbitrary web script or HTML via the recherche parameter in recherche.php. NOTE: other XSS vectors, as reported in the original disclosure, are resultant from other primary vulnerabilities that have separate CVE names.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2015

Credits & Attribution

No credits recorded in the NVD database.

References

More from web-provence

View All →
CVE-2006-4656
PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence...
High 7.5
CVE-2006-2014
Directory traversal vulnerability in gallerie.php in SL_site 1.0 allows remote...
Medium 5
CVE-2006-2013
SQL injection vulnerability in page.php in SL_site 1.0 allows remote...
High 7.5

Affected Vendor

web-provence

View all reports →

Affected Software

sl site
Vulnerable Versions:
1.0

Timeline

Official Publish: April 25th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.