Lucene search

MitreCVE-2006-1810

HistoryApr 18, 2006 - 10:02 a.m.

CVE-2006-1810

2006-04-1810:02:00

mitre

web.nvd.nist.gov

flexbb

xss

vulnerability

web script

html

remote attackers

icq

aim

msn

google talk

user profile

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

53.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the (1) ICQ, (2) AIM, (3) MSN, (4) Google Talk, (5) Website Name, (6) Website Address, (7) Email Address, (8) Location, (9) Signature, and (10) Sub-Titles fields in the user profile.

Affected configurations

Nvd

Node

flexbbflexbbMatch0.5.5_beta

VendorProductVersionCPE
flexbbflexbb0.5.5_betacpe:2.3:a:flexbb:flexbb:0.5.5_beta:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
flexbb	flexbb	0.5.5_beta	cpe:2.3:a:flexbb:flexbb:0.5.5_beta:::::::*

References

www.securityfocus.com/archive/1/431121/100/0/threaded

www.securityfocus.com/bid/17539

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

53.9%

JSON

Related for CVE-2006-1810