CyberSec.Space Logo
Back to CVE Browser

CVE-2006-7004

MEDIUM
6.8
CVSS Severity Score
EPSS Score0.1100%
EPSS Percentile26.15th
PublishedFeb 12, 2007
Last ModifiedApr 23, 2026

Vulnerability Description

Cross-site scripting (XSS) vulnerability in email_request.php in PSY Auction allows remote attackers to inject arbitrary web script or HTML via the user_id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Platforms (CPE)

📦
Php Script Tools

Psy Auction

All versions

References & Advisories

🔗 http://www.osvdb.org/36360
🔗 http://www.securityfocus.com/bid/17974
🔗 http://www.securityfocus.com/data/vulnerabilities/exploits/PSYAuction-0515-sql-html.txt
🔗 http://www.osvdb.org/36360
🔗 http://www.securityfocus.com/bid/17974
🔗 http://www.securityfocus.com/data/vulnerabilities/exploits/PSYAuction-0515-sql-html.txt

Related Vulnerabilities

CVE-2006-70057.5

SQL injection vulnerability in item.php in PSY Auction allows remote attackers to execute arbitrary SQL commands via the id parame...

CVE-2006-607610.0

Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier ...

CVE-2006-610210.0

Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X ser...

CVE-2006-502510.0

Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.2 have unknown impact and attack ve...