{"id":"CVE-2006-5770","url":"https://www.cyber-defence.io/tools/cve/CVE-2006-5770","generatedAt":"2026-10-27T19:39:25.330Z","title":"Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via (1) Bloks, (2) Newnews, (3) lBlok, and (4) foooot parameter in (a) index.php; Newnews, (5) newmsgs, and Bloks parameter…","description":"Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via (1) Bloks, (2) Newnews, (3) lBlok, and (4) foooot parameter in (a) index.php; Newnews, (5) newmsgs, and Bloks parameter in (b) MobileNews.php; Newnews parameter in (c) polls.php; (6) cats parameter in (d) send.php; (7) footer parameter in (e) up.php; and (8) pagenav parameter in (f) cp/index.php.","published":"2006-11-06T23:07:00.000Z","lastModified":"2026-06-16T22:31:51.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":6.8,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P"},"cwe":[],"affected":["ac4p/ac4p mobile"],"epss":{"score":0.02776,"percentile":0.86262,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":6,"verified":true,"firstPublished":"2006-11-03","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":28905,"kind":"exploit","title":"ac4p Mobile - '/cp/index.php?pagenav' Cross-Site Scripting","url":"https://www.exploit-db.com/exploits/28905","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/28905.txt","file":"exploits/php/webapps/28905.txt","published":"2006-11-03","added":"2006-11-03","updated":"2013-10-13","author":"AL-garnei","type":"webapps","platform":"php","port":null,"verified":true,"codes":["CVE-2006-5770","OSVDB-32051"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/20895/info"},{"edbId":28904,"kind":"exploit","title":"ac4p Mobile - 'up.php' Multiple Cross-Site Scripting Vulnerabilities","url":"https://www.exploit-db.com/exploits/28904","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/28904.txt","file":"exploits/php/webapps/28904.txt","published":"2006-11-03","added":"2006-11-03","updated":"2013-10-13","author":"AL-garnei","type":"webapps","platform":"php","port":null,"verified":true,"codes":["CVE-2006-5770","OSVDB-32050"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/20895/info"},{"edbId":28903,"kind":"exploit","title":"ac4p Mobile - 'send.php?cats' Cross-Site Scripting","url":"https://www.exploit-db.com/exploits/28903","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/28903.txt","file":"exploits/php/webapps/28903.txt","published":"2006-11-03","added":"2006-11-03","updated":"2013-10-13","author":"AL-garnei","type":"webapps","platform":"php","port":null,"verified":true,"codes":["CVE-2006-5770","OSVDB-32049"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/20895/info"},{"edbId":28902,"kind":"exploit","title":"ac4p Mobile - 'polls.php' Multiple Cross-Site Scripting Vulnerabilities (1)","url":"https://www.exploit-db.com/exploits/28902","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/28902.txt","file":"exploits/php/webapps/28902.txt","published":"2006-11-03","added":"2006-11-03","updated":"2013-10-13","author":"AL-garnei","type":"webapps","platform":"php","port":null,"verified":true,"codes":["CVE-2006-5770","OSVDB-32048"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/20895/info"},{"edbId":28901,"kind":"exploit","title":"ac4p Mobile - 'MobileNews.php' Multiple Cross-Site Scripting Vulnerabilities","url":"https://www.exploit-db.com/exploits/28901","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/28901.txt","file":"exploits/php/webapps/28901.txt","published":"2006-11-03","added":"2006-11-03","updated":"2013-10-13","author":"AL-garnei","type":"webapps","platform":"php","port":null,"verified":true,"codes":["CVE-2006-5770","OSVDB-32047"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/20895/info"},{"edbId":28900,"kind":"exploit","title":"ac4p Mobile - 'index.php' Multiple Cross-Site Scripting Vulnerabilities","url":"https://www.exploit-db.com/exploits/28900","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/28900.txt","file":"exploits/php/webapps/28900.txt","published":"2006-11-03","added":"2006-11-03","updated":"2013-10-13","author":"AL-garnei","type":"webapps","platform":"php","port":null,"verified":true,"codes":["CVE-2006-5770","OSVDB-32046"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/20895/info"}]},"verdict":{"level":"high","text":"6 public exploits are published in Exploit-DB (verified), so the technical barrier is gone even though the severity is medium and EPSS is 2.8%. Treat it as high on anything reachable from the internet."},"changes":[],"references":[{"url":"http://www.osvdb.org/32046","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/32047","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/32048","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/32049","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/32050","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/32051","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/450496/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/20895","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30007","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/32046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/32047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/32048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/32049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/32050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/32051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/450496/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/20895","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30007","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-5770","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}