CVE-2006-2143 Multiple cross-site scripting (XSS) vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web script or HTML via Javascript events such as "onmouseover" in the (1) color, (2)...
MediumCVSS 4.3
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web script or HTML via Javascript events such as "onmouseover" in the (1) color, (2) size, or (3) url bbcode tags.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jcink textfilebb | = 1.0.16 | No fix listed |
References
- 19883 exploit third-party-advisory vendor-advisory
- 828 third-party-advisory
- 1016013 vdb-entry
- 25123 vdb-entry
- 20060429 TextFileBB 1.0.16 Multiple XSS mailing-list
- 17750 exploit vdb-entry
- textfilebb-bbcode-tags-xss(26129) vdb-entry