Unscored CVE-2006-6459 EUVD-2006-6442GHSA-8m72-2mfv-wxf4

Cross-site scripting (XSS) vulnerability in toplist.php in PhpBB Toplist 1.3.7 allows remote attackers to inject arbitrary HTML or web scri…

Published Dec 11, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in toplist.php in PhpBB Toplist 1.3.7 allows remote attackers to inject arbitrary HTML or web script via the (1) Name and (2) Information fields when adding a new site (toplistnew action).

References

2015 third-party-advisory
21506 vdb-entry
20061208 PhpBB Toplist 1.3.7 Xss Vuln. mailing-list
phpbbtoplist-toplist-xss(30808) vdb-entry