CVE-2006-1701
Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote...
Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitrary web script or HTML via the page parameter to load.php.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitrary web script or HTML via the page parameter to load.php.
- Record
CVE-2006-1701- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitrary web script or HTML via the page parameter to load.php.
- Record
CVE-2006-1701- Updated
- 2026-11-02
EUVDEUVD-2006-1702 No score
Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitrary web script or HTML via the page parameter to load.php.
- Record
EUVD-2006-1702- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5jm5-7748-8vmm No score
Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote...
Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitrary web script or HTML via the page parameter to load.php.
- Record
GHSA-5jm5-7748-8vmm- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Shadowed Portal 5.7 - 'Load.php' Cross-Site Scripting | 2006-04-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1701 is a low vulnerability (CVSS 2.6) in Shadowed Portal Portal, published April 11, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.04%, the 81st percentile. No source names a fixed version.
References
liz0zim.no-ip.org/shad0w.txt
secunia.com/advisories/19595
exchange.xforce.ibmcloud.com/vulnerabilities/25716
securityfocus.com/archive/1/430376/100/0/threaded
securityreason.com/securityalert/685
vupen.com/english/advisories/2006/1286
nvd.nist.gov/vuln/detail/CVE-2006-1701
github.com/advisories/GHSA-5jm5-7748-8vmm