Description
Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user email, and (3) homepage fields.
Metrics
CVSS 2.0 4.3/10
AV:N/AC:M/Au:N/C:N/I:P/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042872.htmlExploit, Patch, Vendor Advisory
- http://secunia.com/advisories/19214Patch, Vendor Advisory
- http://www.inetcop.org/upfiles/33INCSA.2006-0x82-029-zeroboard.pdfVendor Advisory
- http://www.nzeo.com/bbs/zboard.php?id=cgi_bugreport2&no=5406
- http://www.osvdb.org/23847
- http://www.securityfocus.com/archive/1/427466/100/0/threaded
- http://www.securityfocus.com/bid/17075Patch
- http://www.vupen.com/english/advisories/2006/0944
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25212
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042872.htmlExploit, Patch, Vendor Advisory
- http://secunia.com/advisories/19214Patch, Vendor Advisory
- http://www.inetcop.org/upfiles/33INCSA.2006-0x82-029-zeroboard.pdfVendor Advisory
- http://www.nzeo.com/bbs/zboard.php?id=cgi_bugreport2&no=5406
- http://www.osvdb.org/23847
- http://www.securityfocus.com/archive/1/427466/100/0/threaded
- http://www.securityfocus.com/bid/17075Patch
- http://www.vupen.com/english/advisories/2006/0944
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25212
Timeline
- Published
- Mar 14, 2006
- Last modified
- Jun 16, 2026
- NVD status
- Modified