Unscored CVE-2006-4079 EUVD-2006-4071GHSA-6qfq-8g37-v4c7

Cross-site scripting (XSS) vulnerability in newpost.php in DeluxeBB 1.08, and possibly earlier, allows remote attackers to inject arbitrary…

Published Aug 11, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in newpost.php in DeluxeBB 1.08, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the subject parameter (aka the topic title field).

References

19390 vdb-entry
deluxebb-newpost-xss(28272) vdb-entry
1381 third-party-advisory
20060807 DeluxeBB Multiple Vulnerabilities mailing-list
27833 vdb-entry