CVE-2006-3241

CVE-2006-3241

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://pridels0.blogspot.com/2006/06/xennobb-xss-vuln.html http://secunia.com/advisories/20797 https://exchange.xforce.ibmcloud.com/vulnerabilities/27367 http://www.securityfocus.com/bid/18652 http://www.vupen.com/english/advisories/2006/2510