CVE-2006-0923

CVE Database · CVE-2006-0923

CVE-2006-0923

· N/AModified

CVSS v3.1

N/A

EPSS

2.13%

Published

Feb 28, 2006

Modified

Apr 15, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBmyPHPNuke 1.8.8 - 'download.php' Cross-Site Scripting Exploit-DBmyPHPNuke 1.8.8 - 'reviews.php' Cross-Site Scripting TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the letter parameter in reviews.php and (2) the dcategory parameter in download.php.

Affected Products (3)

myphpnuke · myphpnukevulnerable

References (16)

http://secunia.com/advisories/19052

http://securityreason.com/securityalert/491

http://www.myphpnuke.com/article.php?sid=1035&mode=thread&order=0

http://www.nukedx.com/?viewdoc=12

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/425983/100/0/threaded

http://www.securityfocus.com/bid/16815

http://www.vupen.com/english/advisories/2006/0750

https://exchange.xforce.ibmcloud.com/vulnerabilities/24887

http://secunia.com/advisories/19052

http://securityreason.com/securityalert/491

http://www.myphpnuke.com/article.php?sid=1035&mode=thread&order=0

KEV Catalog EPSS Scores Vendors All CVEs