CVE-2006-0217

no score yetEPSS 2.2%

ultimate auction ultimate auction: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary web script or HTML via the (1) item parameter in item.pl and (2) category parameter in itemlist.pl, which reflects the XSS in an error message. NOTE: the affected version might be wrong since the current version as of 20060116 is 3.6.1.

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
Published: 2006-01-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ultimate_auction:ultimate_auction

References

http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0517.html
http://secunia.com/advisories/18477
http://www.osvdb.org/22443
http://www.osvdb.org/22444
http://www.securityfocus.com/bid/16239

Check your stack JSON