CVE-2006-3494 - CVE House
Back to Database
Status published Medium CVE-2006-3494

Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the (1) cat_id parameter to (a) view_classifieds.php; (2) id parameter in (b) view_ad.php; (3) event_id parameter in (c) view_event.php, (d) delete_event.php, and (e) edit_event.php; and (4) group_id in (f) view_group.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-3494

Credits & Attribution

No credits recorded in the NVD database.

References

More from vastal i-tech

View All →
CVE-2008-4469
SQL injection vulnerability in view_cresume.php in Vastal I-Tech Freelance Zone...
High 7.5
CVE-2008-4468
SQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone...
High 7.5
CVE-2008-4467
SQL injection vulnerability in show_series_ink.php in Vastal I-Tech Toner Cart...
High 7.5
CVE-2008-4466
SQL injection vulnerability in view_products_cat.php in Vastal I-Tech Cosmetics Zone...
High 7.5
CVE-2008-4465
SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone...
High 7.5

Affected Vendor

vastal i-tech

View all reports →

Affected Software

buddy zone
Vulnerable Versions:
0

Timeline

Official Publish: July 10th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.