CVE-2006-1222

Опубликовано: 14 мар. 2006

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user email, and (3) homepage fields.

Ссылки

http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042872.html
Exploit
Patch
Vendor Advisory
http://secunia.com/advisories/19214
Patch
Vendor Advisory
http://www.inetcop.org/upfiles/33INCSA.2006-0x82-029-zeroboard.pdf
Vendor Advisory
http://www.nzeo.com/bbs/zboard.php?id=cgi_bugreport2&no=5406
http://www.osvdb.org/23847
http://www.securityfocus.com/archive/1/427466/100/0/threaded
http://www.securityfocus.com/bid/17075
Patch
http://www.vupen.com/english/advisories/2006/0944
https://exchange.xforce.ibmcloud.com/vulnerabilities/25212
http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042872.html
Exploit
Patch
Vendor Advisory
http://secunia.com/advisories/19214
Patch
Vendor Advisory
http://www.inetcop.org/upfiles/33INCSA.2006-0x82-029-zeroboard.pdf
Vendor Advisory
http://www.nzeo.com/bbs/zboard.php?id=cgi_bugreport2&no=5406
http://www.osvdb.org/23847
http://www.securityfocus.com/archive/1/427466/100/0/threaded
http://www.securityfocus.com/bid/17075
Patch
http://www.vupen.com/english/advisories/2006/0944
https://exchange.xforce.ibmcloud.com/vulnerabilities/25212

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*

cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*

cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*

cpe:2.3:a:zeroboard:zeroboard:4.1_pl5:*:*:*:*:*:*:*

cpe:2.3:a:zeroboard:zeroboard:4.1_pl6:*:*:*:*:*:*:*

cpe:2.3:a:zeroboard:zeroboard:4.1_pl7:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00979

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7fmh-jvgj-xpmw

github

почти 4 года назад