CVE-2006-0102

Published: Jan 6, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an "[a]" bbcode tag, possibly the txt parameter to action.php.

Affected (7)

Products: Ralph Capper: Tinyphpforum

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ralph Capper Tinyphpforum	Version 3.46
Ralph Capper Tinyphpforum	Version 3.47
Ralph Capper Tinyphpforum	Version 3.48
Ralph Capper Tinyphpforum	Version 3.499
Ralph Capper Tinyphpforum	Version 3.49
Ralph Capper Tinyphpforum	Version 3.5
Ralph Capper Tinyphpforum	Version 3.6

References (14)

http://evuln.com/vulns/14/summary.html

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/18293

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/320

Source: cve@mitre.org

http://securitytracker.com/id?1015436

Source: cve@mitre.org

Exploit

http://www.osvdb.org/22256

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/420933/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0054

Source: cve@mitre.org

http://evuln.com/vulns/14/summary.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/18293

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/320

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015436

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.osvdb.org/22256

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/420933/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/0054

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.