Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-2063 Details

Description

Multiple cross-site scripting (XSS) vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to inject arbitrary web script or HTML via the login parameter in (1) agent_affil.pl, (2) agent_help.pl, (3) agent_faq.pl, (4) agent_help_insert.pl, (5) sign_out.pl, (6) members.pl, (7) modify_agent_1.pl, (8) modify_agent_2.pl, (9) modify_agent.pl, (10) agent_links.pl, (11) agent_stats_pending_leads.pl, (12) agent_logoff.pl, (13) agent_rev_det.pl, (14) agent_subaffiliates.pl, (15) agent_stats_pending_leads.pl, (16) agent_transactions.pl, (17) agent_payment_history.pl, (18) agent_summary.pl, (19) agent_camp_all.pl, (20) agent_camp_new.pl, (21) agent_camp_notsub.pl, (22) agent_campaign.pl, (23) agent_camp_expired.pl, (24) agent_stats_det.pl, (25) agent_stats.pl, (26) agent_camp_det.pl, (27) agent_camp_sub.pl, (28) agent_affil_list.pl, and (29) agent_affil_code.pl; the logged parameter in (30) agent_faq.pl, (31) agent_help_insert.pl, (32) members.pl, (33) modify_agent_1.pl, (34) modify_agent_2.pl, (35) modify_agent.pl, (36) agent_links.pl, (37) agent_subaffiliates.pl, (38) agent_stats_pending_leads.pl, (39) agent_transactions.pl, (40) agent_summary.pl, (41) agent_camp_all.pl, (42) agent_camp_new.pl, (43) agent_camp_notsub.pl, (44) agent_campaign.pl, (45) agent_camp_expired.pl, (46) agent_stats.pl, (47) agent_camp_det.pl, (48) agent_camp_sub.pl, (49) agent_affil_list.pl, and (50) agent_affil_code.pl; the camp_id parameter in (51) agent_links.pl, (52) agent_subaffiliates.pl, and (53) agent_camp_det.pl; the (54) banner parameter in agent_links.pl; the offset parameter in (55) agent_links.pl, (56) agent_subaffiliates.pl, (57) agent_transactions.pl, and (58) agent_summary.pl; the date parameter in (59) agent_subaffiliates.pl, (60) agent_transactions.pl, and (61) agent_summary.pl; the dates parameter in (62) agent_rev_det.pl and (63) agent_stats_det.pl; the (64) page parameter in agent_camp_det.pl; the (65) agent_id parameter in agent_commission_statement.pl; and the (66) lost password field in lost_pwd.pl.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://pridels0.blogspot.com/2006/04/leadhound-multiple-vuln.html	CVE
http://secunia.com/advisories/19867	CVE	Vendor Advisory
http://www.osvdb.org/25030	CVE	Exploit
http://www.osvdb.org/25031	CVE	Exploit
http://www.osvdb.org/25032	CVE	Exploit
http://www.osvdb.org/25033	CVE	Exploit
http://www.osvdb.org/25034	CVE
http://www.osvdb.org/25035	CVE	Exploit
http://www.osvdb.org/25036	CVE	Exploit
http://www.osvdb.org/25037	CVE	Exploit
http://www.osvdb.org/25038	CVE	Exploit
http://www.osvdb.org/25039	CVE	Exploit
http://www.osvdb.org/25041	CVE	Exploit
http://www.osvdb.org/25042	CVE	Exploit
http://www.osvdb.org/25043	CVE	Exploit
http://www.osvdb.org/25044	CVE	Exploit
http://www.osvdb.org/25045	CVE	Exploit
http://www.osvdb.org/25046	CVE	Exploit
http://www.osvdb.org/25047	CVE	Exploit
http://www.osvdb.org/25048	CVE	Exploit
http://www.osvdb.org/25049	CVE	Exploit
http://www.osvdb.org/25050	CVE	Exploit
http://www.osvdb.org/25051	CVE	Exploit
http://www.osvdb.org/25052	CVE	Exploit
http://www.osvdb.org/25053	CVE	Exploit
http://www.osvdb.org/25054	CVE	Exploit
http://www.osvdb.org/25055	CVE	Exploit
http://www.osvdb.org/25056	CVE	Exploit
http://www.osvdb.org/25057	CVE	Exploit
http://www.osvdb.org/25058	CVE	Exploit
http://www.osvdb.org/25059	CVE	Exploit
http://www.osvdb.org/25060	CVE	Exploit
http://pridels0.blogspot.com/2006/04/leadhound-multiple-vuln.html	[email protected]
http://secunia.com/advisories/19867	[email protected]	Vendor Advisory
http://www.osvdb.org/25030	[email protected]	Exploit
http://www.osvdb.org/25031	[email protected]	Exploit
http://www.osvdb.org/25032	[email protected]	Exploit
http://www.osvdb.org/25033	[email protected]	Exploit
http://www.osvdb.org/25034	[email protected]
http://www.osvdb.org/25035	[email protected]	Exploit
http://www.osvdb.org/25036	[email protected]	Exploit
http://www.osvdb.org/25037	[email protected]	Exploit
http://www.osvdb.org/25038	[email protected]	Exploit
http://www.osvdb.org/25039	[email protected]	Exploit
http://www.osvdb.org/25041	[email protected]	Exploit
http://www.osvdb.org/25042	[email protected]	Exploit
http://www.osvdb.org/25043	[email protected]	Exploit
http://www.osvdb.org/25044	[email protected]	Exploit
http://www.osvdb.org/25045	[email protected]	Exploit
http://www.osvdb.org/25046	[email protected]	Exploit
http://www.osvdb.org/25047	[email protected]	Exploit
http://www.osvdb.org/25048	[email protected]	Exploit
http://www.osvdb.org/25049	[email protected]	Exploit
http://www.osvdb.org/25050	[email protected]	Exploit
http://www.osvdb.org/25051	[email protected]	Exploit
http://www.osvdb.org/25052	[email protected]	Exploit
http://www.osvdb.org/25053	[email protected]	Exploit
http://www.osvdb.org/25054	[email protected]	Exploit
http://www.osvdb.org/25055	[email protected]	Exploit
http://www.osvdb.org/25056	[email protected]	Exploit
http://www.osvdb.org/25057	[email protected]	Exploit
http://www.osvdb.org/25058	[email protected]	Exploit
http://www.osvdb.org/25059	[email protected]	Exploit
http://www.osvdb.org/25060	[email protected]	Exploit

see all 64 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
leadhound network leadhound full	2.1 2.1_network_version
CPE cpe:2.3:a:leadhound_network:leadhound_full:2.1:::::::* cpe:2.3:a:leadhound_network:leadhound_full:2.1_network_version:::::::* Remediation No remediation found in references.
leadhound network leadhound lite	2.1
CPE cpe:2.3:a:leadhound_network:leadhound_lite:2.1:::::::* Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Apr 27, 2006	Initial Analysis	[email protected]