CVE-2006-2143

Published: May 2, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web script or HTML via Javascript events such as "onmouseover" in the (1) color, (2) size, or (3) url bbcode tags.

Affected (1)

Products: Jcink: Textfilebb

Jcink

1 product

Textfilebb

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jcink Textfilebb	Version 1.0.16

References (14)

http://secunia.com/advisories/19883

Source: cve@mitre.org

ExploitVendor Advisory

http://securityreason.com/securityalert/828

Source: cve@mitre.org

http://securitytracker.com/id?1016013

Source: cve@mitre.org

http://www.osvdb.org/25123

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/432461/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17750

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/26129

Source: cve@mitre.org

http://secunia.com/advisories/19883