VulnerabilityModified
CVE-2006-1202
Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mess and (2) user parameters in messanger.php, possibly requiring a URL encoded value.
MEDIUM 4.3EPSS 1.94%
Does this matter?
Lower severity and a low EPSS score (1.94%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mess and (2) user parameters in messanger.php, possibly requiring a URL encoded value.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.94% probability · 79th percentile
- CISA KEV
- Not listed
- Affected
- jcink.com/textfilebb
- Source
- cve@mitre.org
References
- http://notlegal.ws/textfilebbmessanger.txtURL Repurposed
- http://secunia.com/advisories/19149Vendor Advisory
- http://securitytracker.com/id?1015744
- http://www.securityfocus.com/archive/1/427081/100/0/threaded
- http://www.securityfocus.com/bid/17029
- http://www.vupen.com/english/advisories/2006/0897
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25091
- http://notlegal.ws/textfilebbmessanger.txtURL Repurposed
- http://secunia.com/advisories/19149Vendor Advisory
- http://securitytracker.com/id?1015744
- http://www.securityfocus.com/archive/1/427081/100/0/threaded
- http://www.securityfocus.com/bid/17029
- http://www.vupen.com/english/advisories/2006/0897
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25091
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.