CVE-2006-2088

Published: Apr 29, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Devsyn Open Bulletin Board (OpenBB) 1.0.6 allow remote attackers to inject arbitrary web script or HTML via (1) the FID parameter in board.php and (2) the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612 (read.php) and CVE-2005-2566 (board.php).

Affected (1)

Products: Devsyn: Open Bulletin Board

1 product

Open Bulletin Board

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Devsyn Open Bulletin Board	Version 1.0.6

References (6)

http://securityreason.com/securityalert/806

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/432106/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26095

Source: cve@mitre.org

http://securityreason.com/securityalert/806

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/432106/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/26095

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.