Vulnerability Details CVE-2006-1034
Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to galerie_index.php and possibly (2) galerie_onfly.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. The second vector might not be XSS.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.1%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2006-1034
-
cpe:2.3:a:woltlab:burning_board:1.1.1
-
cpe:2.3:a:woltlab:burning_board:2.0_beta_3
-
cpe:2.3:a:woltlab:burning_board:2.0_beta_4
-
cpe:2.3:a:woltlab:burning_board:2.0_beta_5
-
cpe:2.3:a:woltlab:burning_board:2.0_rc1
-
cpe:2.3:a:woltlab:burning_board:2.0_rc2
-
cpe:2.3:a:woltlab:burning_board:2.2.2
-
cpe:2.3:a:woltlab:burning_board:2.3.1
-
cpe:2.3:a:woltlab:burning_board:2.3.3
-
cpe:2.3:a:woltlab:burning_board:2.4
-
cpe:2.3:a:woltlab:burning_board:2.5
-
cpe:2.3:a:woltlab:burning_board:2.6
-
cpe:2.3:a:woltlab:burning_board:2.7