Unrated severityNVD Advisory· Published Feb 19, 2006· Updated Apr 16, 2026
CVE-2006-0779
CVE-2006-0779
Description
Cross-site scripting (XSS) vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using a URL-encoded iframe tag.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- www.gulftech.orgnvdExploitVendor Advisory
- www.osvdb.org/23119nvd
- www.securityfocus.com/archive/1/425084/100/0/threadednvd
- www.securityfocus.com/bid/16604nvd
- www.vupen.com/english/advisories/2006/0529nvd
- www.xmbforum.comnvd
- docs.xmbforum2.com/index.phpnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/24647nvd
News mentions
0No linked articles in our index yet.