CVE-2006-2524

medium

Description

Cross-site scripting (XSS) vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when processing the user date format.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26600

http://www.vupen.com/english/advisories/2006/1900

http://www.usebb.net/community/topic.php?id=1130

http://www.osvdb.org/25684

http://sourceforge.net/project/shownotes.php?release_id=418462&group_id=93103

http://secunia.com/advisories/20187

Details

Source: Mitre, NVD

Published: 2006-05-22

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N