CVE-2006-3051: Six Offene Systeme GmbH Sixcms

Medium severity, CVSS 5.1. EPSS: 2.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to inject arbitrary script code or HTML via the page parameter.

Affected products

• Six Offene Systeme GmbH Sixcms: up to and including 6.0

Published 2006-06-16. Last modified 2026-06-16.