Unscored severity · published May 12, 2006
CVE-2006-2321
Multiple cross-site scripting (XSS) vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors
–
CVSS
1.4%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2207.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ID
Idealbb · Ideal Science
1.5.0_beta1; 1.5.0_beta2; 1.5.0_beta3; 1.5.0_beta4; 1.5.0_rc1; 1.5.1; +10 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2321
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2321
secunia.com
http://secunia.com/advisories/20035
securityreason.com
http://securityreason.com/securityalert/871
www.idealscience.com
http://www.idealscience.com/ibb/posts.aspx?postID=24415
www.osvdb.org
http://www.osvdb.org/25458
www.securityfocus.com
http://www.securityfocus.com/archive/1/433248/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/17920
More from Idealbb
–
CVE-2006-2318
Incomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to upload and execute an ASP script via a ".asa" file, which bypasses the…
–
CVE-2006-2319
Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script…
–
CVE-2006-2320
Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors…
–
CVE-2006-2317
Unspecified vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to read arbitrary files under the web root via unspecified attack vectors related to…
–
CVE-2004-2208
CRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to conduct HTTP response splitting attacks via unknown vectors