Unscored CVE-2006-2234 EUVD-2006-2235GHSA-7jvx-484x-8v9p

Multiple cross-site scripting (XSS) vulnerabilities in TyroCMS beta 1.0 allow remote attackers to inject arbitrary web script or HTML via (…

Published May 5, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in TyroCMS beta 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a javascript URI in an img BBCode tag, or a JavaScript event in a (2) url BBCode tag or (3) color BBCode tag.

References

20060502 TyroCms beta V1.0 multiple XSS injections mailing-list
tyrocms-bbcode-xss(26222) vdb-entry
848 third-party-advisory