CVE-2006-5770

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.71%

Published

Nov 6, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (6)

All weaponized →

Exploit-DBac4p Mobile - '/cp/index.php?pagenav' Cross-Site Scripting Exploit-DBac4p Mobile - 'index.php' Multiple Cross-Site Scripting Vulnerabilities Exploit-DBac4p Mobile - 'MobileNews.php' Multiple Cross-Site Scripting Vulnerabilities Exploit-DBac4p Mobile - 'polls.php' Multiple Cross-Site Scripting Vulnerabilities (1)Exploit-DBac4p Mobile - 'send.php?cats' Cross-Site Scripting Exploit-DBac4p Mobile - 'up.php' Multiple Cross-Site Scripting Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via (1) Bloks, (2) Newnews, (3) lBlok, and (4) foooot parameter in (a) index.php; Newnews, (5) newmsgs, and Bloks parameter in (b) MobileNews.php; Newnews parameter in (c) polls.php; (6) cats parameter in (d) send.php; (7) footer parameter in (e) up.php; and (8) pagenav parameter in (f) cp/index.php.

Affected Products (1)

ac4p · ac4p_mobilevulnerable

References (18)

http://www.osvdb.org/32046

http://www.osvdb.org/32047

http://www.osvdb.org/32048

http://www.osvdb.org/32049

http://www.osvdb.org/32050

http://www.osvdb.org/32051

http://www.securityfocus.com/archive/1/450496/100/0/threaded

http://www.securityfocus.com/bid/20895

Exploit