CVE-2006-1097

2006-03-0911:00:00

mitre

www.cve.org

AI Score

5.8

Confidence

High

EPSS

0.017

Percentile

87.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow remote attackers to inject arbitrary web script or HTML via the fileid parameter to (1) info_db.php or (2) database.php.

References

archives.neohapsis.com/archives/fulldisclosure/2006-03/0033.html

www.nukedx.com/?viewdoc=17

www.osvdb.org/23809

www.osvdb.org/23811

www.securityfocus.com/archive/1/426583

exchange.xforce.ibmcloud.com/vulnerabilities/25004