PT-2006-1220 · Navboard · Navboard

Aliaksandr Hartsuyeu · Published 2006-01-09 · Updated 2018-10-19 · CVE-2006-0140

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NavBoard versions 2.6.0 through V17beta2

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the b, textlarge, and url bbcode tags.

Recommendations For NavBoard versions 2.6.0 through V17beta2, consider disabling the b, textlarge, and url bbcode tags in post.php as a temporary workaround until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2006-0140

Affected Products

Navboard

References · 8

• 🔥 http://evuln.com/vulns/19/summary.html · Exploit
• 🔥 http://secunia.com/advisories/18345 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0140 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24021 · Note
• http://vupen.com/english/advisories/2006/0092 · Note
• http://osvdb.org/22277 · Note
• http://securityfocus.com/archive/1/421149/100/0/threaded · Note
• http://securityfocus.com/bid/16165 · Note