Medium · 6.1 CVE-2006-0149 EUVD-2006-0157GHSA-vwxv-qqrg-44rx

Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to inject arbitrary we…

Published Jan 9, 2006 · Updated Apr 3, 2025 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to inject arbitrary web script or HTML via the message field.

References

1015451 vdb-entry
20060106 SimpBook "message" Remote Cross-Site Scripting Vulnerability mailing-list