CVE-2006-0703

CVE-2006-0703 describes an unspecified cross-site scripting (XSS) vulnerability in imageVue 16.1, specifically within the index.php file. This vulnerability allows an attacker to inject malicious scripts via the query string, such as the 'bgcol' parameter, which is not properly sanitized when inserted into style and body tags. With a CVSS score of 4.3, it is a medium-severity vulnerability requiring medium attack complexity and user interaction, potentially leading to information disclosure or defacement. While not listed in CISA's KEV catalog, an ExploitDB entry exists, indicating public exploit code, though there is no evidence of active exploitation or significant community discussion.