CVE-2006-0524

no score yetEPSS 4.0%

Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

EPSS: 4.0% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
Published: 2006-02-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ashwebstudio:ashnews

References

http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0955.html
http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0969.html
http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0979.html
http://secunia.com/advisories/9331
http://www.osvdb.org/22934

Check your stack JSON