PT-2006-1220 · Navboard · Navboard

Aliaksandr Hartsuyeu · Publicado 2006-01-09 · Atualizado 2018-10-19 · CVE-2006-0140

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NavBoard versions 2.6.0 through V17beta2

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the b, textlarge, and url bbcode tags.

Recommendations For NavBoard versions 2.6.0 through V17beta2, consider disabling the b, textlarge, and url bbcode tags in post.php as a temporary workaround until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2006-0140

Produtos afetados

Navboard

Referências · 8

• 🔥 http://evuln.com/vulns/19/summary.html · Exploit
• 🔥 http://secunia.com/advisories/18345 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24021 · Nota
• http://vupen.com/english/advisories/2006/0092 · Nota
• http://osvdb.org/22277 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0140 · Nota de Segurança
• http://securityfocus.com/archive/1/421149/100/0/threaded · Nota
• http://securityfocus.com/bid/16165 · Nota