Cross site scripting

2006-04-1810:02:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

High

0.047 Low

EPSS

Percentile

92.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) newuser_realname and (2) newuser_icq parameters, a different vector than CVE-2006-1768. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
tritanium_bulletin_boardle1.2.3

CPE	Name	Operator	Version
	tritanium_bulletin_board	le	1.2.3

References

secunia.com/advisories/19635

securityreason.com/securityalert/693

www.osvdb.org/24556

www.vupen.com/english/advisories/2006/1329

exchange.xforce.ibmcloud.com/vulnerabilities/25751