CVE-2006-2774

no score yetEPSS 1.5%

Cross-site scripting (XSS) vulnerability in search.php in QontentOne CMS allows remote attackers to inject arbitrary web script or HTML via the search_phrase parameter.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
Published: 2006-06-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

qontentone:qontentone_cms

References

http://archives.neohapsis.com/archives/bugtraq/2006-05/0685.html
http://secunia.com/advisories/20392
http://securitytracker.com/id?1016195
http://www.securityfocus.com/archive/1/435409/100/0/threaded
http://www.securityfocus.com/bid/18209

Check your stack JSON