PT-2006-3068 · Devsyn · Open Bulletin Board

Qex · Published 2006-04-29 · Updated 2018-10-18 · CVE-2006-2088

Mitre

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Devsyn Open Bulletin Board (OpenBB) 1.0.6 allow remote attackers to inject arbitrary web script or HTML via (1) the FID parameter in board.php and (2) the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612 (read.php) and CVE-2005-2566 (board.php).

Fix

Related Identifiers

CVE-2006-2088

Affected Products

Open Bulletin Board

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-2088 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26095 · Note
• http://securityfocus.com/archive/1/432106/100/0/threaded · Note
• http://securityreason.com/securityalert/806 · Note