CVE-2006-0806
EPSS 12.6%Published: 2/21/2006Modified: 5/27/2026
Description
Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page parameter in adodb-pager.inc.php and (2) other unspecified vectors related to PHP_SELF.
Affected packages (2)
- Debian/cactifrom 0, < 0.8.6d-1
- Debian/libphp-adodbfrom 0, < 4.72-0.1