CVE-2006-1202

Published: Mar 14, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mess and (2) user parameters in messanger.php, possibly requiring a URL encoded value.

Affected (1)

Products: Jcink.com: Textfilebb

Jcink.com

1 product

Textfilebb

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jcink.com Textfilebb	Version 1.0

References (14)

http://notlegal.ws/textfilebbmessanger.txt

Source: cve@mitre.org

URL Repurposed

http://secunia.com/advisories/19149

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015744

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/427081/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17029

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0897

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25091

Source: cve@mitre.org

http://notlegal.ws/textfilebbmessanger.txt