CVE-2006-0140

Published: Jan 9, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in post.php in NavBoard V16 Stable(2.6.0) and V17beta2 allows remote attackers to inject arbitrary web script or HTML via the (1) b, (2) textlarge, and (3) url bbcode tags.

Affected (2)

Products: Navboard: Navboard

Navboard

1 product

Navboard

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Navboard Navboard	Version 16
Navboard Navboard	Version 17 beta2

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (14)

http://evuln.com/vulns/19/summary.html

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/18345

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/22277

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/421149/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16165

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0092

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24021

Source: cve@mitre.org

http://evuln.com/vulns/19/summary.html