CVE-2006-0806
EPSS 12.6%發布日:2006/2/21修改日:2026/5/27
描述
Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page parameter in adodb-pager.inc.php and (2) other unspecified vectors related to PHP_SELF.
受影響套件(2)
- Debian/cactifrom 0, < 0.8.6d-1
- Debian/libphp-adodbfrom 0, < 4.72-0.1