CVE-2006-6348 Cross-site scripting (XSS) vulnerability in board.php in mowdBB RC-6 allows remote attackers to inject arbitrary web script or HTML via the forum_name[] parameter.
MediumCVSS 6.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in board.php in mowdBB RC-6 allows remote attackers to inject arbitrary web script or HTML via the forum_name[] parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mowdbb | = rc6 | No fix listed |
References
- 1977 third-party-advisory
- 20061204 new xss in modbb forum mailing-list
- modbb-board-xss(30710) vdb-entry