6

CVE-2006-6421

Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpbb Group ≫ Phpbb Version2.0
Phpbb Group ≫ Phpbb Version2.0.0
Phpbb Group ≫ Phpbb Version2.0.1
Phpbb Group ≫ Phpbb Version2.0.2
Phpbb Group ≫ Phpbb Version2.0.3
Phpbb Group ≫ Phpbb Version2.0.4
Phpbb Group ≫ Phpbb Version2.0.5
Phpbb Group ≫ Phpbb Version2.0.6
Phpbb Group ≫ Phpbb Version2.0.6c
Phpbb Group ≫ Phpbb Version2.0.6d
Phpbb Group ≫ Phpbb Version2.0.7
Phpbb Group ≫ Phpbb Version2.0.7a
Phpbb Group ≫ Phpbb Version2.0.8
Phpbb Group ≫ Phpbb Version2.0.8a
Phpbb Group ≫ Phpbb Version2.0.9
Phpbb Group ≫ Phpbb Version2.0.10
Phpbb Group ≫ Phpbb Version2.0.11
Phpbb Group ≫ Phpbb Version2.0.12
Phpbb Group ≫ Phpbb Version2.0.13
Phpbb Group ≫ Phpbb Version2.0.14
Phpbb Group ≫ Phpbb Version2.0.15
Phpbb Group ≫ Phpbb Version2.0.16
Phpbb Group ≫ Phpbb Version2.0.17
Phpbb Group ≫ Phpbb Version2.0.18
Phpbb Group ≫ Phpbb Version2.0.19
Phpbb Group ≫ Phpbb Version2.0.20
Phpbb Group ≫ Phpbb Version2.0.21
Phpbb Group ≫ Phpbb Version2.0_beta1
Phpbb Group ≫ Phpbb Version2.0_rc1
Phpbb Group ≫ Phpbb Version2.0_rc2
Phpbb Group ≫ Phpbb Version2.0_rc3
Phpbb Group ≫ Phpbb Version2.0_rc4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 15.45% 0.964
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6 6.8 6.4
AV:N/AC:M/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624
http://www.securityfocus.com/bid/21806
http://secunia.com/advisories/23283
http://securityreason.com/securityalert/2005
http://www.securityfocus.com/archive/1/453774/100/0/threaded
http://www.securityfocus.com/archive/1/456579/100/0/threaded
http://www.securityfocus.com/archive/1/456728/100/100/threaded
http://www.securityfocus.com/archive/1/456784/100/100/threaded
http://www.securityfocus.com/bid/22001
https://exchange.xforce.ibmcloud.com/vulnerabilities/30776