Unscored CVE-2006-3795 EUVD-2006-3789GHSA-cvxr-j7v7-7948

Multiple cross-site scripting (XSS) vulnerabilities in DeluxeBB before 1.08 allow remote attackers to inject arbitrary web script or HTML v…

Published Jul 21, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in DeluxeBB before 1.08 allow remote attackers to inject arbitrary web script or HTML via the (1) membercookie cookie in header.php and the (2) redirect parameter in misc.php.

References

deluxebb-misc-xss(27836) vdb-entry
1254 third-party-advisory
19052 vdb-entry
21116 third-party-advisory
20060718 Advisory : DeluxeBB mutiple vulnerabilities mailing-list
ADV-2006-2879 vdb-entry
deluxebb-header-xss(27837) vdb-entry
20060718 DeluxeBB mutiple vulnerabilities mailing-list