{"api_version":"1","generated_at":"2026-07-23T12:26:53+00:00","cve":"CVE-2006-5059","urls":{"html":"https://cve.report/CVE-2006-5059","api":"https://cve.report/api/cve/CVE-2006-5059.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-5059","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-5059"},"summary":{"title":"CVE-2006-5059","description":"Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to (1) dosearch.php, (2) postlist.php, (3) showmembers.php, (4) faq_english.php, (5) online.php, (6) login.php, (7) newuser.php, (8) wwwthreads.php, (9) search.php, or (10) postlist.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-09-28 00:07:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5.1","severity":"","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","baseScore":5.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/archive/1/446911/100/0/threaded","name":"http://www.securityfocus.com/archive/1/446911/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22211","name":"http://secunia.com/advisories/22211","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"WWWthreads \"Cat\" Cross-Site Scripting Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/1645","name":"http://securityreason.com/securityalert/1645","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - wwwthreads <= 5.4.2 croos site script vulnerbilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/20178","name":"http://www.securityfocus.com/bid/20178","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"WWWThreads Cat Parameter Multiple Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.vupen.com/english/advisories/2006/3858","name":"http://www.vupen.com/english/advisories/2006/3858","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-5059","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-5059","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"5059","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wired_community_software","cpe5":"wwwthreads","cpe6":"5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5059","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wired_community_software","cpe5":"wwwthreads","cpe6":"rc3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5059","vulnerable":"1","versionEndIncluding":"5.4.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wired_community_software","cpe5":"wwwthreads","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T19:32:23.313Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1645","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/1645"},{"name":"ADV-2006-3858","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/3858"},{"name":"20060924 wwwthreads <= 5.4.2 croos site script vulnerbilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/446911/100/0/threaded"},{"name":"22211","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/22211"},{"name":"20178","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/20178"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-09-24T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to (1) dosearch.php, (2) postlist.php, (3) showmembers.php, (4) faq_english.php, (5) online.php, (6) login.php, (7) newuser.php, (8) wwwthreads.php, (9) search.php, or (10) postlist.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-17T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"1645","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/1645"},{"name":"ADV-2006-3858","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/3858"},{"name":"20060924 wwwthreads <= 5.4.2 croos site script vulnerbilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/446911/100/0/threaded"},{"name":"22211","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/22211"},{"name":"20178","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/20178"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-5059","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to (1) dosearch.php, (2) postlist.php, (3) showmembers.php, (4) faq_english.php, (5) online.php, (6) login.php, (7) newuser.php, (8) wwwthreads.php, (9) search.php, or (10) postlist.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1645","refsource":"SREASON","url":"http://securityreason.com/securityalert/1645"},{"name":"ADV-2006-3858","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/3858"},{"name":"20060924 wwwthreads <= 5.4.2 croos site script vulnerbilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/446911/100/0/threaded"},{"name":"22211","refsource":"SECUNIA","url":"http://secunia.com/advisories/22211"},{"name":"20178","refsource":"BID","url":"http://www.securityfocus.com/bid/20178"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-5059","datePublished":"2006-09-28T00:00:00.000Z","dateReserved":"2006-09-27T00:00:00.000Z","dateUpdated":"2024-08-07T19:32:23.313Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-09-28 00:07:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","baseScore":5.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wired_community_software:wwwthreads:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.2","matchCriteriaId":"387CB8E8-C6DB-4979-B4C4-747DF29D90ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:wired_community_software:wwwthreads:5.4:*:*:*:*:*:*:*","matchCriteriaId":"14269C40-6DCA-4FA5-AAC0-F901F4493FA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wired_community_software:wwwthreads:rc3:*:*:*:*:*:*:*","matchCriteriaId":"773253B4-17E1-435E-9744-076AF5CCF031"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"5059","Ordinal":"1","Title":"CVE-2006-5059","CVE":"CVE-2006-5059","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"5059","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to (1) dosearch.php, (2) postlist.php, (3) showmembers.php, (4) faq_english.php, (5) online.php, (6) login.php, (7) newuser.php, (8) wwwthreads.php, (9) search.php, or (10) postlist.php.","Type":"Description","Title":"CVE-2006-5059"},{"CveYear":"2006","CveId":"5059","Ordinal":"2","NoteData":"2006-09-27","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"5059","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}