CVE-2006-6421: XSS
Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6421?
CVE-2006-6421 has been classified as a medium severity vulnerability due to its potential for cross-site scripting exploits.
How do I fix CVE-2006-6421?
To fix CVE-2006-6421, upgrade your phpBB installation to a version that is not vulnerable, such as any version above 2.0.21.
Who is affected by CVE-2006-6421?
CVE-2006-6421 affects users of phpBB versions 2.0.x, specifically those utilizing private messaging functionality.
What kind of attack can CVE-2006-6421 facilitate?
CVE-2006-6421 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts.
Are there any workarounds for CVE-2006-6421?
A temporary workaround for CVE-2006-6421 is to disable the private messaging feature until the software is updated.