Unscored severity · published Mar 14, 2006
CVE-2006-1222
Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user email, and (3) homepage fields.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZE
Zeroboard · Zeroboard
4.1_pl2; 4.1_pl3; 4.1_pl4; 4.1_pl5; 4.1_pl6; 4.1_pl7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1222
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1222
Exploit
http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042872.html
Patch
http://secunia.com/advisories/19214
Vendor Advisory
http://www.inetcop.org/upfiles/33INCSA.2006-0x82-029-zeroboard.pdf
www.nzeo.com
http://www.nzeo.com/bbs/zboard.php?id=cgi_bugreport2&no=5406
www.osvdb.org
http://www.osvdb.org/23847
www.securityfocus.com
http://www.securityfocus.com/archive/1/427466/100/0/threaded
More from Zeroboard
–
CVE-2006-3070
write_ok.php in Zeroboard 4.1 pl8, when installed on Apache with mod_mime, allows remote attackers to bypass restrictions for uploading files with executable extensions by…
–
CVE-2005-1820
zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function
–
CVE-2005-0379
Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a
–
CVE-2005-0380
Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier…
–
CVE-2005-0495
Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php…