CVE-2006-2109

Description

Cross-site scripting (XSS) vulnerability in the parse_query_str function in include/print.php in JSBoard 2.0.10 and 2.0.11, and possibly other versions before 2.0.12, allows remote attackers to inject arbitrary web script or HTML via parameters that are set as global variables within the program, as demonstrated using the table parameter to login.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26211

http://www.vupen.com/english/advisories/2006/1636

http://www.securityfocus.com/bid/17778

http://www.securityfocus.com/archive/1/432714/100/0/threaded

http://www.osvdb.org/25222

http://secunia.com/advisories/19937

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS