CVE-2006-5830

N/A Unknown
Published: November 10, 2006 Modified: April 23, 2026
View on NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topid, (2) forid, and (3) catid parameters to code/cp_forum_view.php; (4) choosed_language parameter to cp_dpage.php; (5) orderdir parameter to cp_links_search.php; (6) order_field parameter to (a) cp_show_ec_products.php and (b) cp_users_online.php; and the (7) signature and (8) fiscal code fields in the user profile.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://secunia.com/advisories/22719
Source: cve@mitre.org
Vendor Advisory
http://securityreason.com/securityalert/1839
Source: cve@mitre.org
http://sourceforge.net/project/shownotes.php?release_id=478370
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/450701/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/20931
Source: cve@mitre.org
Exploit
http://www.vupen.com/english/advisories/2006/4378
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/30045
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/30048
Source: cve@mitre.org
http://secunia.com/advisories/22719
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://securityreason.com/securityalert/1839
Source: af854a3a-2127-422b-91ae-364da2661108
http://sourceforge.net/project/shownotes.php?release_id=478370
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/450701/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/20931
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.vupen.com/english/advisories/2006/4378
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/30045
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/30048
Source: af854a3a-2127-422b-91ae-364da2661108

16 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
2.4%
85th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

aiocp