CVE-2006-1965

no score yetEPSS 2.5%

Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) onuser, (2) pass, (3) chatsys, (4) room, (5) username, and (6) to parameters in (a) sendim.cgi; the (7) username parameter in (b) imessage.cgi; the (8) password parameter in (c) login.cgi; and the (9) cat_id parameter in (d) viewcat.cgi.

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
Published: 2006-04-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

aasi_media:net_clubs_pro

References

http://pridels0.blogspot.com/2006/04/net-clubs-pro-xss-vuln.html
http://secunia.com/advisories/19651
http://www.osvdb.org/24754
http://www.osvdb.org/24755
http://www.osvdb.org/24756

Check your stack JSON