Unscored CVE-2006-1891 EUVD-2006-1891GHSA-gr68-m4v5-jggf

Cross-site scripting (XSS) vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML v…

Published Apr 20, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML via a user's profile, possibly using the FormVal_profile parameter. NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability. If it is site-specific, then it should not be included in CVE.

References

ADV-2006-1377 vdb-entry
17556 vdb-entry
765 third-party-advisory
724 third-party-advisory
1015955 vdb-entry
19700 third-party-advisory
20060416 BetaBoard Cross Site Scripting vulnerability mailing-list
20060416 BetaBoard Cross Site Scripting vulnerability mailing-list
betaboard-editprofile-xss(25838) vdb-entry