CVEvulnerability
CVE-2006-0140
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-01-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in post.php in NavBoard V16 Stable(2.6.0) and V17beta2 allows remote attackers to inject arbitrary web script or HTML via the (1) b, (2) textlarge, and (3) url bbcode tags.
Affected configurations
• navboard navboard 16
• navboard navboard 17
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://evuln.com/vulns/19/summary.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18345 Exploit, Vendor Advisory
- http://www.osvdb.org/22277 www.osvdb.org
- http://www.securityfocus.com/archive/1/421149/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16165 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0092 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24021 exchange.xforce.ibmcloud.com
- http://evuln.com/vulns/19/summary.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18345 Exploit, Vendor Advisory
- http://www.osvdb.org/22277 www.osvdb.org
- http://www.securityfocus.com/archive/1/421149/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16165 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0092 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24021 exchange.xforce.ibmcloud.com