CVE-2006-1916

Multiple cross-site scripting (XSS) vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ulocation or (2) uhobbies parameters.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:dbbs:dbbs:*:*:*:*:*:*:*:*
cpe:2.3:a:dbbs:dbbs:2.0:*:*:*:*:*:*:*

History

21 Nov 2024, 00:10

Type Values Removed Values Added
References () http://securityreason.com/securityalert/771 - () http://securityreason.com/securityalert/771 -
References () http://www.securityfocus.com/archive/1/431117 - Exploit, Vendor Advisory () http://www.securityfocus.com/archive/1/431117 - Exploit, Vendor Advisory
References () http://www.securityfocus.com/bid/17559 - Exploit () http://www.securityfocus.com/bid/17559 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/25923 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/25923 -

Information

Published : 2006-04-20 18:06

Updated : 2025-04-03 01:03


NVD link : CVE-2006-1916

Mitre link : CVE-2006-1916

CVE.ORG link : CVE-2006-1916


JSON object : View

Products Affected

dbbs

  • dbbs