CVE-2006-5430: Cross-site scripting (XSS) vulnerability in the search functionality in db-central (dbc) Enterprise CMS and...

Security readout for executives and security teams

CVE-2006-5430 is a reported cross-site scripting issue in the search feature of db-central Enterprise CMS and db-central CMS. A remote user may be able to inject script or HTML through the search parameter named needle. The record notes that the information comes from third-party sources and its provenance is unknown. Exposure is likely limited to organizations still running db-central Enterprise CMS or db-central CMS with the affected search feature reachable by users or the public internet. No version range is provided, so product identification matters more than version matching. Prioritize as unknown-to-moderate depending on exposure. Public legacy CMS instances deserve prompt review because XSS can affect user trust and authenticated sessions, but the evidence base is old, incomplete, and not tied to known active exploitation. Mitigation focus: Identify any db-central CMS or Enterprise CMS deployments.; Check vendor or archived advisory guidance for updates or workarounds.; Restrict public access to affected search pages where feasible..

Prepared

Jun 29, 2026, 09:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.