CVE-2006-6421

Опубликовано: 10 дек. 2006

Источник: nvd

CVSS2: 6

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpbb_group:phpbb:2.0:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.18:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.19:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.20:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.21:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01944

Низкий

6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2006-6421

ubuntu

почти 19 лет назад

CVE-2006-6421

debian

почти 19 лет назад

Cross-site scripting (XSS) vulnerability in the private message box im ...

GHSA-72m2-fw2r-7r4h

github

больше 3 лет назад

EPSS

Процентиль: 83%

0.01944

Низкий

6 Medium

CVSS2

Дефекты

NVD-CWE-Other