{"id":"CVE-2006-6082","aliases":["EUVD-2006-6065","GHSA-jh7p-cmpq-rp5m"],"status":"published","title":"Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote...","description":"Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to addlisting.asp or the (2) search parameter to search.asp.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01926,"percentile":0.80136,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2006-11-24T18:00:00Z","modified":"2026-06-16T22:32:25Z","exploits":[{"source":"exploitdb","id":"EDB-29155","title":"CreaDirectory 1.2 - 'addlisting.asp?cat' Cross-Site Scripting","type":"webapps","platform":"asp","date":"2006-11-21","verified":true,"url":"https://www.exploit-db.com/exploits/29155"},{"source":"exploitdb","id":"EDB-29156","title":"CreaDirectory 1.2 - 'search.asp?search' Cross-Site Scripting","type":"webapps","platform":"asp","date":"2006-11-21","verified":true,"url":"https://www.exploit-db.com/exploits/29156"}],"products":[{"vendor":"creascripts","product":"creadirectory"}],"references":[{"url":"http://www.securityfocus.com/bid/21230","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://www.vupen.com/english/advisories/2006/4665","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30473","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://s-a-p.ca/index.php?page=OurAdvisories\u0026id=54","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory","URL Repurposed"]},{"url":"http://secunia.com/advisories/23067","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/1907","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/452241/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-6082"},{"url":"https://github.com/advisories/GHSA-jh7p-cmpq-rp5m"}],"sources":{"cve":[{"id":"CVE-2006-6082","description":"Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to addlisting.asp or the (2) search parameter to search.asp.","status":"published","published":"2006-11-24T18:00:00Z","modified":"2024-08-07T20:12:31.818Z","updated_at":"2026-11-02T14:33:50.024504Z"}],"euvd":[{"id":"EUVD-2006-6065","description":"Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to addlisting.asp or the (2) search parameter to search.asp.","status":"published","published":"2006-11-24T18:00:00Z","modified":"2024-08-07T20:12:31Z","updated_at":"2026-11-03T01:15:45.23563Z"}],"ghsa":[{"id":"GHSA-jh7p-cmpq-rp5m","title":"Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote...","description":"Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to addlisting.asp or the (2) search parameter to search.asp.","status":"published","published":"2022-05-01T07:34:40Z","modified":"2023-01-31T05:02:47Z","updated_at":"2026-11-02T14:48:19.79999Z"}],"nvd":[{"id":"CVE-2006-6082","description":"Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to addlisting.asp or the (2) search parameter to search.asp.","status":"published","published":"2006-11-24T18:07:00Z","modified":"2026-06-16T22:32:25.847Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:08.546281Z"}]}}