CVE-2006-2741

CVE-2006-2741 concerns an XSS vulnerability in Epicdesigns tinyBB 0.3. The description specifies that remote attackers can inject arbitrary script or HTML via the q parameter in forgot.php, which is echoed in an error message, and notes other unspecified vectors. The affected software is tinyBB 0...

CVE-2006-2739

CVE-2006-2739 is a PHP remote file inclusion vulnerability in the Epicdesigns tinyBB 0.3 package. When PHP register_globals is enabled, an attacker can cause arbitrary PHP code execution by exploiting the tinybb_footers parameter in footers.php. The public records describe the vulnerability and a...

CVE-2006-2740

CVE-2006-2740 describes SQL injection vulnerabilities in the Epicdesigns tinyBB 0.3 package. The affected components are the login flow and forgot/password recovery vectors: specifically the (1) q parameter in forgot.php and the (2) username and (3) password parameters in login.php, plus other un...