CVE-2006-1810: XSS

Published Apr 18, 2006

Updated

Multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the (1) ICQ, (2) AIM, (3) MSN, (4) Google Talk, (5) Website Name, (6) Website Address, (7) Email Address, (8) Location, (9) Signature, and (10) Sub-Titles fields in the user profile.

Affected Software

1 affected component

FlexBB FlexBB=0.5.5_beta

Event History

Apr 18, 2006

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1810?

CVE-2006-1810 is classified as a medium severity vulnerability due to its potential for exploitation via cross-site scripting.

How do I fix CVE-2006-1810?

To fix CVE-2006-1810, it's recommended to update FlexBB to the latest version or implement input validation and sanitization across the affected fields.

What are the affected fields in CVE-2006-1810?

CVE-2006-1810 affects multiple fields including ICQ, AIM, MSN, Google Talk, Website Name, Website Address, Email Address, Location, Signature, and Sub-Titles.

Who can exploit CVE-2006-1810?

CVE-2006-1810 can be exploited by remote attackers who can inject arbitrary web scripts or HTML into the affected fields.

What is FlexBB's version vulnerable to CVE-2006-1810?

The vulnerable version of FlexBB is 0.5.5 BETA.