Unscored severity · published Apr 29, 2006
CVE-2006-2089
Multiple cross-site scripting (XSS) vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) username…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) username parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MY
Mysmartbb · Mysmartbb
1.1.2; 1.1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2089
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2089
securityreason.com
http://securityreason.com/securityalert/807
www.securityfocus.com
http://www.securityfocus.com/archive/1/432095/100/0/threaded
Exploit
http://www.securityfocus.com/bid/17707
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/26089
More from Mysmartbb
–
CVE-2006-2090
Multiple SQL injection vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) username parameters