CVE-2006-1144

Cross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML via (1) the user parameter in deleteuser.php and (2) the hits parameter in viewuser.php.

CVSS v2.0 NVD

2.6 LOWAV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

5.04% chance of exploitation in the next 30 days, 92nd percentile

Published

2006-03-10

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/27372
• https://www.exploit-db.com/exploits/27371

Security advisories

• http://secunia.com/advisories/19155
• http://www.securityfocus.com/bid/17025

References

• CVE Record
• NVD entry