PT-2006-5569 · Cloudnine Interactive · Cloudnine Interactive Cj Tag Board

Alex + 1 · Published 2006-09-14 · Updated 2018-10-17 · CVE-2006-4797

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CloudNine Interactive CJ Tag Board version 3.0

Description The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a url BBcode tag in the cjmsg parameter. This could potentially lead to unauthorized actions on the affected system.

Recommendations For CloudNine Interactive CJ Tag Board version 3.0, consider disabling the url BBcode tag in the cjmsg parameter as a temporary workaround until a patch is available. Restrict access to the tag.php file to minimize the risk of exploitation. Avoid using the cjmsg parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-4797

Affected Products

Cloudnine Interactive Cj Tag Board

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-4797 · Security Note
• http://securityreason.com/securityalert/1580 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28501 · Note
• http://evuln.com/vulns/137/summary.html · Note
• http://securityfocus.com/archive/1/445913/100/0/threaded · Note
• http://securityfocus.com/bid/20000 · Note