PT-2006-2157 · Ekin · Ekinboard

Aliaksandr Hartsuyeu · Published 2006-03-10 · Updated 2018-10-18 · CVE-2006-1130

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions EKINboard version 1.0.3

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag. This could potentially lead to unauthorized actions on the affected system.

Recommendations For EKINboard version 1.0.3, consider disabling the use of Javascript URIs in BBCode img tags until a patch is available. Restrict access to the img tag functionality to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-1130

Affected Products

Ekinboard

References · 11

• 🔥 http://evuln.com/vulns/88/summary.html · Exploit
• http://ekinboard.com/patch_for_1.0.3.txt · Patch
• http://securityfocus.com/bid/16861 · Patch
• http://ekinboard.com/forums/v1/viewtopic.php?id=469 · Patch
• http://secunia.com/advisories/19045 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1130 · Security Note
• http://securityreason.com/securityalert/558 · Note
• http://securityfocus.com/archive/1/427073/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/0758 · Note
• http://osvdb.org/23546 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24921 · Note