CVE-2006-5036 - CVE House
Back to Database
Status published Medium CVE-2006-5036

MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote...

Vulnerability Description

MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via the sq_remote_page_url parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that "The vendor does not consider this a vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-5036

Credits & Attribution

No credits recorded in the NVD database.

References

More from squiz

View All →
CVE-2022-32277
Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct...
Medium 5.3
CVE-2019-19374
An issue was discovered in core/assets/form/form_question_types/form_question_type_file_upload/form_question_type_file_upload.inc in Squiz Matrix CMS...
Critical 9.1
CVE-2019-19373
An issue was discovered in Squiz Matrix CMS 5.5.0 prior...
High 7.5
CVE-2017-14198
An issue was discovered in Squiz Matrix before 5.3.6.1 and...
High 8.8
CVE-2017-14197
An issue was discovered in Squiz Matrix before 5.3.6.1 and...
Medium 6.1

Affected Vendor

Affected Software

mysource classic, mysource matrix
Vulnerable Versions:
0

Timeline

Official Publish: September 27th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.