CVE-2006-0471

medium

Description

Cross-site scripting (XSS) vulnerability in the bbcode function in functions.php in my little homepage my little forum, as last modified in June 2005, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24310

http://www.vupen.com/english/advisories/2006/0349

http://www.securityfocus.com/archive/1/423167/100/0/threaded

http://www.osvdb.org/22856

http://evuln.com/vulns/51/

http://attrition.org/pipermail/vim/2006-January/000520.html

Details

Source: Mitre, NVD

Published: 2006-01-31

Updated: 2026-04-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N