CVE-2006-0806
Fixed in a distro release EPSS 6%
Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page parameter in adodb-pager.inc.php and (2) other unspecified vectors related to PHP_SELF.
Products: john_lim adodb
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cacti | 0.8.6d-1 |
| Debian 12 | libphp-adodb | 4.72-0.1 |
| Debian 13 | cacti | 0.8.6d-1 |
| Debian 13 | libphp-adodb | 4.72-0.1 |
| Debian 14 | cacti | 0.8.6d-1 |
| Debian 14 | libphp-adodb | 4.72-0.1 |
| Debian 3.0 | libphp-adodb | 1.51-1.2 |
| Debian 3.1 | cacti | 0.8.6c-7sarge3 |
| Debian 3.1 | libphp-adodb | 4.52-1sarge1 |
| Debian 3.1 | moodle | 1.4.4.dfsg.1-3sarge1 |