CVE-2006-6779: XSS
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or HTML via an SWF file that uses ActionScript to trigger execution of JavaScript.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6779?
CVE-2006-6779 is characterized as a high severity vulnerability due to its potential for remote code execution via cross-site scripting.
How do I fix CVE-2006-6779?
To fix CVE-2006-6779, it's essential to upgrade vBulletin to versions 3.6.5 or later, which address this vulnerability.
What versions of vBulletin are affected by CVE-2006-6779?
CVE-2006-6779 affects vBulletin versions 3.5.1, 3.5.2, 3.5.4, 3.6.0, 3.6.1, 3.6.2, 3.6.3, and 3.6.4.
What type of attack does CVE-2006-6779 enable?
CVE-2006-6779 enables attackers to perform cross-site scripting (XSS) attacks, which can result in unauthorized script execution in user browsers.
Is CVE-2006-6779 a known vulnerability?
Yes, CVE-2006-6779 is a known vulnerability and has been documented in security resources since its discovery.