VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 18, 2006· Updated Jun 16, 2026

CVE-2006-1810

CVE-2006-1810

Description

Multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the (1) ICQ, (2) AIM, (3) MSN, (4) Google Talk, (5) Website Name, (6) Website Address, (7) Email Address, (8) Location, (9) Signature, and (10) Sub-Titles fields in the user profile.

Affected products

2
  • Flexbb/Flexbb2 versions
    cpe:2.3:a:flexbb:flexbb:0.5.5_beta:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:flexbb:flexbb:0.5.5_beta:*:*:*:*:*:*:*
    • (no CPE)range: = 0.5.5 BETA

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.