CVE-2006-1415 - Cross-site scripting (XSS) vulnerability in iforget.aspx in dotNetBB 2.42EC SP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the em parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in iforget.aspx in dotNetBB 2.42EC SP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the em parameter

Published Mar 28, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.30%

Description

Cross-site scripting (XSS) vulnerability in iforget.aspx in dotNetBB 2.42EC SP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the em parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://pridels0.blogspot.com/2006/03/xss-vuln-in-dotnetbb-v24.html
x_refsource_MISC
http://secunia.com/advisories/19398
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/24122
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17246
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/1098
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1419
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25462
vdb-entryx_refsource_XF

Link	Providers	Tags
http://pridels0.blogspot.com/2006/03/xss-vuln-in-dotnetbb-v24.html		x_refsource_MISC
http://secunia.com/advisories/19398		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/24122		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17246		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/1098		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1419		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25462		vdb-entryx_refsource_XF