NVD

Id
60814  
Name
CVE-2006-2109  
Description
Cross-site scripting (XSS) vulnerability in the parse_query_str function in include/print.php in JSBoard 2.0.10 and 2.0.11, and possibly other versions before 2.0.12, allows remote attackers to inject arbitrary web script or HTML via parameters that are set as global variables within the program, as demonstrated using the table parameter to login.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-02  
Modified Date
2011-03-07  
Seq
2006-2109  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
314039 60814 CVE-2006-2109 20060502 JSBoard XSS vulnerability  View
314040 60814 CVE-2006-2109 17778  View
314041 60814 CVE-2006-2109 ADV-2006-1636  View
314042 60814 CVE-2006-2109 jsboard-login-xss(26211)  View
314043 60814 CVE-2006-2109 https://www.klink.name/security/aklink-sa-2006-001-jsboard-xss.txt  View

Related JVN