CVE

Id
22525  
CVE No.
CVE-2006-6421  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user.  
Phase
Assigned (20061209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
217533 22525 CVE-2006-6421 BUGTRAQ:20061207 phpbb 2.0.x [xss]  View
217534 22525 CVE-2006-6421 URL:http://www.securityfocus.com/archive/1/archive/1/453774/100/0/threaded  View
217535 22525 CVE-2006-6421 BUGTRAQ:20070111 phpBB (privmsg.php) XSS Exploit  View
217536 22525 CVE-2006-6421 URL:http://www.securityfocus.com/archive/1/archive/1/456579/100/0/threaded  View
217537 22525 CVE-2006-6421 BUGTRAQ:20070111 Re: phpBB (privmsg.php) XSS Exploit  View
217538 22525 CVE-2006-6421 URL:http://www.securityfocus.com/archive/1/archive/1/456728/100/100/threaded  View
217539 22525 CVE-2006-6421 BUGTRAQ:20070112 Re: phpBB (privmsg.php) XSS Exploit  View
217540 22525 CVE-2006-6421 URL:http://www.securityfocus.com/archive/1/archive/1/456784/100/100/threaded  View
217541 22525 CVE-2006-6421 CONFIRM:http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624  View
217542 22525 CVE-2006-6421 BID:21806  View
217543 22525 CVE-2006-6421 URL:http://www.securityfocus.com/bid/21806  View
217544 22525 CVE-2006-6421 BID:22001  View
217545 22525 CVE-2006-6421 URL:http://www.securityfocus.com/bid/22001  View
217546 22525 CVE-2006-6421 SECUNIA:23283  View
217547 22525 CVE-2006-6421 URL:http://secunia.com/advisories/23283  View
217548 22525 CVE-2006-6421 SREASON:2005  View
217549 22525 CVE-2006-6421 URL:http://securityreason.com/securityalert/2005  View
217550 22525 CVE-2006-6421 XF:phpbb-privmsgphp-xss(30776)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60274 JVNDB-2006-002540 MailEnable Professional などの IMAP サービスにおけるスタックベースのバッファオーバーフローの脆弱性 MailEnable Professional および Enterprise 用の IMAP サービスには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2006-6423 22525 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002540.html  View