Unscored CVE-2006-1097 EUVD-2006-1101GHSA-3wpc-xc2g-h2x7

Multiple cross-site scripting (XSS) vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow remote attackers to in…

Published Mar 9, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow remote attackers to inject arbitrary web script or HTML via the fileid parameter to (1) info_db.php or (2) database.php.

References

20060301 Woltlab Burning Board 2.x (Datenbank MOD fileid) MultipleVulnerabilities mailing-list
23811 vdb-entry
20060301 Woltlab Burning Board 2.x (Datenbank MOD fileid) MultipleVulnerabilities mailing-list
wbb-multiple-xss(25004) vdb-entry
23809 vdb-entry
http://www.nukedx.com/?viewdoc=17