PublicDate: 2006-02-21 02:02:00 UTC Candidate: CVE-2006-0806 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0806 Description: Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page parameter in adodb-pager.inc.php and (2) other unspecified vectors related to PHP_SELF. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_libphp-adodb: released (4.72-0.1ubuntu1) edgy_libphp-adodb: released (4.72-0.1ubuntu1) feisty_libphp-adodb: released (4.72-0.1ubuntu1) gutsy_libphp-adodb: released (4.72-0.1ubuntu1) devel_libphp-adodb: released (4.72-0.1ubuntu1) dapper_moodle: released (1.5.3+20060108-1ubuntu1.1) edgy_moodle: released (1.6.1+20060825-1) feisty_moodle: released (1.6.1+20060825-1) gutsy_moodle: released (1.8.2-1) devel_moodle: released (1.8.2-1) upstream_libphp-adodb: needs-triage upstream_moodle: needs-triage