CVE-2006-6871 - CVE House
Back to Database
Status published Medium CVE-2006-6871

Multiple cross-site scripting (XSS) vulnerabilities in eNdonesia 8.4 allow remote...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter in a viewlink operation in mod.php, (2) the intypeid parameter in a showinfo operation in the informasi module in mod.php, (3) the "your Friend" field in friend.php, or (4) the "Main Text" field in admin.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-6871

Credits & Attribution

No credits recorded in the NVD database.

References

More from endonesia

View All →
CVE-2010-3461
SQL injection vulnerability in the Publisher module in eNdonesia 8.4...
High 7.5
CVE-2008-3452
SQL injection vulnerability in the Calendar module in eNdonesia 8.4...
Medium 6.8
CVE-2007-3394
Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers...
High 7.5
CVE-2006-6874
Multiple cross-site scripting (XSS) vulnerabilities in friend.php in eNdonesia 8.4...
Medium 6.8
CVE-2006-6873
Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow...
High 7.5

Affected Vendor

Affected Software

endonesia
Vulnerable Versions:
8.4

Timeline

Official Publish: January 5th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.