CVE-2006-5626 - CVE House
Back to Database
Status published Medium CVE-2006-5626

Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber Content Management...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber Content Management System (CMS) before 1.3.36 on 20061026 allows remote attackers to inject arbitrary web script or HTML, probably via arbitrary parameters in the query string, as demonstrated with a vigilon parameter. NOTE: earlier downloads of 1.3.36 have the vulnerability; the software was updated without changing the version number.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-5626

Credits & Attribution

No credits recorded in the NVD database.

References

More from phpfaber

View All →
CVE-2009-4382
Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly...
Medium 4.3
CVE-2007-5754
PHP remote file inclusion vulnerability in urlinn_includes/config.php in phpFaber URLInn...
Medium 6.8
CVE-2007-2155
Directory traversal vulnerability in template.php in in phpFaber TopSites 3...
High 7.8
CVE-2006-3902
Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites 2.0.9...
Medium 4.3
CVE-2006-3770
Multiple SQL injection vulnerabilities in index.php in phpFaber TopSites 2.0.9...
High 7.5

Affected Vendor

Affected Software

phpfaber content management system
Vulnerable Versions:
0

Timeline

Official Publish: October 31st, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.