Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2006-0650

Cross-site scripting (XSS) vulnerability in cpaint2.inc.php in the CPAINT library before 2.0.3, as used in multiple scripts, allows remote attackers to inject arbitrary web script or HTML via the cpaint_response_type parameter, which is displayed in a resulting error message, as demonstrated using a hex-encoded IFRAME tag.

  • Published: Feb 13, 2006
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-0650
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Software From Fixed in
cpaint / cpaint 1.3_sp 1.3_sp.x
cpaint / cpaint 2.0.1 2.0.1.x
cpaint / cpaint 1.01 1.01.x
cpaint / cpaint 1.2 1.2.x
cpaint / cpaint 1.0 1.0.x
cpaint / cpaint 2.0.2 2.0.2.x
cpaint / cpaint 1.3 1.3.x
cpaint / cpaint 1.3_sp1 1.3_sp1.x
cpaint / cpaint 2.0.0 2.0.0.x
cpaint / cpaint pre1.0 pre1.0.x