CVE-2006-0140

medium

Description

Cross-site scripting (XSS) vulnerability in post.php in NavBoard V16 Stable(2.6.0) and V17beta2 allows remote attackers to inject arbitrary web script or HTML via the (1) b, (2) textlarge, and (3) url bbcode tags.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24021

http://www.vupen.com/english/advisories/2006/0092

http://www.securityfocus.com/bid/16165

http://www.securityfocus.com/archive/1/421149/100/0/threaded

http://www.osvdb.org/22277

Details

Source: Mitre, NVD

Published: 2006-01-09

Updated: 2026-04-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N