Unscored CVE-2006-1889 EUVD-2006-1889GHSA-fjcr-x859-mv45

Cross-site scripting (XSS) vulnerability in the search action handler in index.php in Nils Asmussen (aka SCRIPTSOLUTION) Boardsolution 1.12…

Published Apr 20, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the search action handler in index.php in Nils Asmussen (aka SCRIPTSOLUTION) Boardsolution 1.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Search for" item (keyword parameter).

References

17549 vdb-entry
20060415 Boardsolution <= 1.12 XSS mailing-list
19654 third-party-advisory
boardsolution-index-xss(25805) vdb-entry
1015948 vdb-entry
ADV-2006-1413 vdb-entry
766 third-party-advisory
718 third-party-advisory