Unscored CVE-2006-2167 EUVD-2006-2168GHSA-wjvw-h7x5-x9x9

Cross-site scripting (XSS) vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers to inject arbitrary…

Published May 4, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers to inject arbitrary web script or HTML by setting the username field to contain JavaScript in the SRC attribute of an IMG element.

References

sfusers-register-xss(26215) vdb-entry
17783 vdb-entry
831 third-party-advisory
19932 third-party-advisory
ADV-2006-1637 vdb-entry
20060502 SF-Users V1.0 XSS injection mailing-list