CVE-2006-3306 Cross-site scripting (XSS) vulnerability in the preparestring function in lib/common.php in Project EROS bbsengine before 20060501-0142-jam, and possibly earlier versions dating back to 2006-02-23, mi...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the preparestring function in lib/common.php in Project EROS bbsengine before 20060501-0142-jam, and possibly earlier versions dating back to 2006-02-23, might allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zoid technologies project eros bbsengine | <= 2006-04-29 | No fix listed |
| zoid technologies project eros bbsengine | = 2006-02-23 | No fix listed |
References
- 20760 patch third-party-advisory vendor-advisory
- 18627 patch vdb-entry
- ADV-2006-2503 vdb-entry
- www.zoidtechnologies.com
- projecteros-common-xss(27407) vdb-entry