PT-2006-2960 · Unknown · Prayer Request Board

Published 2006-04-21 · Updated 2008-09-05 · CVE-2006-1976

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Prayer Request Board (PRB) Beta 1 versions prior to 20060320

Description The issue is related to a cross-site scripting (XSS) vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the Request field in the addRequest.php file.

Recommendations For versions prior to 20060320, update to a version released after 20060320 to resolve the issue.

Fix

Related Identifiers

CVE-2006-1976

Affected Products

Prayer Request Board

References · 3

• http://osvdb.org/23958 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-1976 · Security Note
• http://osvdb.org/ref/23/23958-prb.txt · Note