CVE-2006-0880: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote att...

Security readout for executives and security teams

CVE-2006-0880 is a set of cross-site scripting flaws in Noah's Classifieds 1.3. An attacker could make the site reflect injected script or HTML, potentially affecting users who view crafted content. The sources do not provide CVSS, a vendor patch, or evidence of active exploitation. Exposure is likely limited to organizations still running Noah's Classifieds 1.3 or derived legacy code. Risk increases if register_globals remains enabled, because two listed vectors depend on it. Prioritize discovery first. If the application is internet-facing or handles authenticated users, remediate or retire it promptly because XSS can undermine user trust and session security. Mitigation focus: Identify any Noah's Classifieds 1.3 installations or forks.; Check vendor or maintainer guidance for a fixed release or migration path.; Disable PHP register_globals where present..

Prepared

Jun 29, 2026, 14:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.