CVE-2006-0165 Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote attackers to inject arbitrary Javascript via the (1) url and (2)...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote attackers to inject arbitrary Javascript via the (1) url and (2) name field of the default email form.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| plain black webgui | = 5.5.8 | No fix listed |
| plain black webgui | = 6.2.10_gamma | No fix listed |
| plain black webgui | = 6.2.11_gamma | No fix listed |
| plain black webgui | = 6.3.0_beta | No fix listed |
| plain black webgui | = 6.4.0_beta | No fix listed |
| plain black webgui | = 6.5.0_beta | No fix listed |
| plain black webgui | = 6.5.1_beta | No fix listed |
| plain black webgui | = 6.5.2_beta | No fix listed |
| plain black webgui | = 6.5.3_beta | No fix listed |
| plain black webgui | = 6.5.4_gamma | No fix listed |
| plain black webgui | = 6.5.5_gamma | No fix listed |
| plain black webgui | = 6.5.6_gamma | No fix listed |
| plain black webgui | = 6.6.0_beta | No fix listed |
| plain black webgui | = 6.6.1_beta | No fix listed |
| plain black webgui | = 6.6.2_gamma | No fix listed |
| plain black webgui | = 6.6.3_gamma | No fix listed |
| plain black webgui | = 6.6.4_gamma | No fix listed |
| plain black webgui | = 6.6.5 | No fix listed |
| plain black webgui | = 6.7.0_beta | No fix listed |
| plain black webgui | = 6.7.1_beta | No fix listed |
| plain black webgui | = 6.7.2_beta | No fix listed |
| plain black webgui | = 6.7.3_gamma | No fix listed |
| plain black webgui | = 6.7.4_gamma | No fix listed |
| plain black webgui | = 6.7.5_gamma | No fix listed |
| plain black webgui | = 6.7.6_gamma | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| plain black webgui | = 6.7.7_gamma | No fix listed |
| plain black webgui | = 6.7.8_gamma | No fix listed |
| plain black webgui | = 6.8.1_beta | No fix listed |
| plain black webgui | = 6.8.2_beta | No fix listed |
| plain black webgui | = 6.8.3_gamma | No fix listed |
References
- 18372 patch third-party-advisory vendor-advisory
- sourceforge.net patch
- sourceforge.net
- ADV-2006-0126 vdb-entry
- webgui-forms-xss(24053) vdb-entry