CVEvulnerability
CVE-2006-2524
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-05-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-site scripting (XSS) vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when processing the user date format.
Affected configurations
• usebb usebb 1.0 rc1
References
- http://secunia.com/advisories/20187 Patch, Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=418462&group_id=93103 Patch
- http://www.osvdb.org/25684 www.osvdb.org
- http://www.usebb.net/community/topic.php?id=1130 Patch
- http://www.vupen.com/english/advisories/2006/1900 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26600 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20187 Patch, Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=418462&group_id=93103 Patch
- http://www.osvdb.org/25684 www.osvdb.org
- http://www.usebb.net/community/topic.php?id=1130 Patch
- http://www.vupen.com/english/advisories/2006/1900 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26600 exchange.xforce.ibmcloud.com