CVEvulnerability
CVE-2006-1222
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-03-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user email, and (3) homepage fields.
Affected configurations
• zeroboard zeroboard 4.1 pl2
• zeroboard zeroboard 4.1 pl3
• zeroboard zeroboard 4.1 pl4
• zeroboard zeroboard 4.1 pl5
• zeroboard zeroboard 4.1 pl6
• zeroboard zeroboard 4.1 pl7
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042872.html Exploit, Patch, Vendor Advisory
- http://secunia.com/advisories/19214 Patch, Vendor Advisory
- http://www.inetcop.org/upfiles/33INCSA.2006-0x82-029-zeroboard.pdf Vendor Advisory
- http://www.nzeo.com/bbs/zboard.php?id=cgi_bugreport2&no=5406 www.nzeo.com
- http://www.osvdb.org/23847 www.osvdb.org
- http://www.securityfocus.com/archive/1/427466/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17075 Patch
- http://www.vupen.com/english/advisories/2006/0944 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25212 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042872.html Exploit, Patch, Vendor Advisory
- http://secunia.com/advisories/19214 Patch, Vendor Advisory
- http://www.inetcop.org/upfiles/33INCSA.2006-0x82-029-zeroboard.pdf Vendor Advisory
- http://www.nzeo.com/bbs/zboard.php?id=cgi_bugreport2&no=5406 www.nzeo.com
- http://www.osvdb.org/23847 www.osvdb.org
- http://www.securityfocus.com/archive/1/427466/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17075 Patch
- http://www.vupen.com/english/advisories/2006/0944 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25212 exchange.xforce.ibmcloud.com