CVE-2006-5626

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.95%

Published

Oct 31, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBphpFaber CMS 1.3.36 - 'Htmlarea.php' Cross-Site Scripting TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber Content Management System (CMS) before 1.3.36 on 20061026 allows remote attackers to inject arbitrary web script or HTML, probably via arbitrary parameters in the query string, as demonstrated with a vigilon parameter. NOTE: earlier downloads of 1.3.36 have the vulnerability; the software was updated without changing the version number.

Affected Products (1)

phpfaber · phpfaber_content_management_systemvulnerable

References (14)

http://secunia.com/advisories/22629

ExploitPatchVendor Advisory

http://securityreason.com/securityalert/1802

http://www.securityfocus.com/archive/1/449894/100/0/threaded

http://www.securityfocus.com/bid/20821

http://www.vigilon.com/advisories/vg-phpfaber-24-10-2006.txt

http://www.vigilon.com/resources/102506c.html

ExploitPatchVendor Advisory

http://www.vupen.com/english/advisories/2006/4260