4.3
CVE-2006-0437
- EPSS 0.75%
- Published 06.02.2006 22:02:00
- Last modified 03.04.2025 01:03:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Cross-site scripting (XSS) vulnerability in admin_smilies.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML via Javascript events such as "onmouseover" in the (1) smile_url or (2) smile_emotion parameters, which bypasses a check for "<" and ">" characters.
Data is provided by the National Vulnerability Database (NVD)
Phpbb Group ≫ Phpbb Version2.0.6c
Phpbb Group ≫ Phpbb Version2.0.6d
Phpbb Group ≫ Phpbb Version2.0.7
Phpbb Group ≫ Phpbb Version2.0.7a
Phpbb Group ≫ Phpbb Version2.0.8
Phpbb Group ≫ Phpbb Version2.0.8a
Phpbb Group ≫ Phpbb Version2.0.9
Phpbb Group ≫ Phpbb Version2.0.10
Phpbb Group ≫ Phpbb Version2.0.11
Phpbb Group ≫ Phpbb Version2.0.12
Phpbb Group ≫ Phpbb Version2.0.13
Phpbb Group ≫ Phpbb Version2.0.14
Phpbb Group ≫ Phpbb Version2.0.15
Phpbb Group ≫ Phpbb Version2.0.16
Phpbb Group ≫ Phpbb Version2.0.17
Phpbb Group ≫ Phpbb Version2.0.18
Phpbb Group ≫ Phpbb Version2.0.19
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.75% | 0.707 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|