CVE-2006-3308

CVE-2006-3308 affects the wpprop component of Project EROS bbsengine prior to 20060622-0315. The vulnerability’s impact is not clearly quantified in the provided documents, but remote attack vectors via [img] tags are noted with a possible cross-site scripting (XSS) effect. The NVD entry assigns ...

CVE-2006-3306

CVE-2006-3306 affects Project EROS bbsengine (lib/common.php, preparestring) with an XSS flaw. The vulnerability is in the preparestring function and could allow remote attackers to inject arbitrary web script or HTML; affected versions include before 20060501-0142-jam and possibly earlier since ...

CVE-2006-3307

Summary: CVE-2006-3307 describes multiple SQL injection vulnerabilities in Project EROS bbsengine (before bbsengine-20060429-1550-jam). Affected component: bbsengine, specifically (1) unspecified parameters in php/comment.php and (2) the getpartialmatches method in php/aolbonics.php. Root cause /...