CVE-2006-2687

Description

Cross-site scripting (XSS) vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject arbitrary web script or HTML via the email address (useremail parameter).

Affected products

• agtc_websolutions / php-agtc_membership_system1.1a – 1.1a

References

• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/2020
• VENDOR_ADVISORYhttp://secunia.com/advisories/20305
• MISChttp://www.securityfocus.com/bid/18127
• MISChttp://www.securityfocus.com/archive/1/435134
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/26703
• MISChttp://securityreason.com/securityalert/995