CVE-2006-1202 Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mess and (2) user parameters in messanger.ph...
MediumCVSS 4.3
EPSS 1.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mess and (2) user parameters in messanger.php, possibly requiring a URL encoded value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jcink.com textfilebb | = 1.0 | No fix listed |
References
- notlegal.ws url-repurposed
- 19149 third-party-advisory vendor-advisory
- 1015744 vdb-entry
- 20060308 textfileBB <= 1.0 Multiple XSS mailing-list
- 17029 vdb-entry
- ADV-2006-0897 vdb-entry
- textbb-messanger-xss(25091) vdb-entry