PT-2006-1662 · Unknown · Unknown Domain Shoutbox

Aliaksandr Hartsuyeu · Published 2006-02-08 · Updated 2018-10-19 · CVE-2006-0605

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Unknown Domain Shoutbox version 2005.07.21

Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be done possibly via the Handle or Message fields.

Recommendations For version 2005.07.21, as a temporary workaround, consider validating and sanitizing user input in the Handle and Message fields to prevent arbitrary web script or HTML injection. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2006-0605

Affected Products

Unknown Domain Shoutbox

References · 7

• http://evuln.com/vulns/55/summary.html · Vendor Advisory
• http://secunia.com/advisories/18759 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0605 · Security Note
• http://securityfocus.com/bid/16543 · Note
• http://securityfocus.com/archive/1/424679/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24440 · Note
• http://vupen.com/english/advisories/2006/0476 · Note