Unrated severityNVD Advisory· Published Jun 2, 2006· Updated Jun 16, 2026
CVE-2006-2755
CVE-2006-2755
Description
Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
26cpe:2.3:a:ubbcentral:ubb.threads:5.0:*:*:*:*:*:*:*+ 24 more
- cpe:2.3:a:ubbcentral:ubb.threads:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:5.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.5.2_beta2:*:*:*:*:*:*:*
- cpe:2.3:a:ubbcentral:ubb.threads:6.5.3:*:*:*:*:*:*:*
- Range: 5.x and earlier
Patches
Vulnerability mechanics
References
6News mentions
0No linked articles in our index yet.