NVD

Id
61500  
Name
CVE-2006-2815  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Two Shoes M-Factory (TSMF) SimpleBoard 1.1.0 Stable (aka com_simpleboard), as used in Mambo and Joomla!, allow remote attackers to inject arbitrary web script or HTML via (1) the Name field in "post ne topic" in the Frontend, (2) the Title (aka Community-Title) field in Simpleboard Configuration in the Backend Admin Panel, and the (3) Name (aka Forum-Title) and (4) Name (aka Category-Title) fields in Simpleboard Administration in the Backend Admin Panel. NOTE: some sources have stated that the sb_authorname parameter is affected, but it is unclear which field is related to it.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-05  
Modified Date
2011-09-13  
Seq
2006-2815  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318119 61500 CVE-2006-2815 20060601 Joomla/Mambo CMS Component SimpleBoard 1.1 XSS-Vulnerabilities  View
318120 61500 CVE-2006-2815 1030  View
318121 61500 CVE-2006-2815 20060601 Joomla/Mambo CMS Component SimpleBoard 1.1 XSS-Vulnerabilities  View
318122 61500 CVE-2006-2815 18251  View
318123 61500 CVE-2006-2815 ADV-2006-2111  View
318124 61500 CVE-2006-2815 simpleboard-multiple-xss(27021)  View

Related JVN