Approved changes feed: RSS · Atom
cpe:2.3:a:interact:interact:1.9.1:*:*:*:*:*:*:*part: a version: 1.9.1 update: *
| Vendor | Interact (8e7804d8-e436-5665-8c3f-6849baa40139) |
|---|---|
| Product | Interact (eb6b3cc5-0ba9-5b4b-b4b4-81925b58fe24) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-1644 |
vulnerable | 2026-06-08 04:48:57.693560 |
Details available
login.php in Interact 2.1.1 generates different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2006-04-06T10:00:00.000Z
Updated: 2024-08-07T17:19:49.288Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1643 |
vulnerable | 2026-06-08 04:48:57.693168 |
Details available
SQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to execute arbitrary SQL commands via the user_name parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party.
Published: 2006-04-06T10:00:00.000Z
Updated: 2024-08-07T17:19:48.753Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1642 |
vulnerable | 2026-06-08 04:48:57.691757 |
Details available
Cross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) the search_terms parameter to (a) search.php, and (2) the first_name, (3) last_name, (4) email, (5) password, and (6) confirm_password parameters to (b) userinput.php. NOTE: the provenance of this information is unknown; the details are obtained from third party. In addition, the lack of precision in the third party descriptions makes it unclear whether the named vectors are correct.
Published: 2006-04-06T10:00:00.000Z
Updated: 2024-08-07T17:19:48.580Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.