CVE-2006-2188

Published: May 4, 2006Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Body field of a private message (PM), (2) BBCode, or (3) a forum post.

Affected (1)

Products: Cmscout: Cmscout

Cmscout

1 product

Cmscout

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cmscout Cmscout	Up to 1.10

References (16)

http://secunia.com/advisories/19933

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/838

Source: cve@mitre.org

http://securitytracker.com/id?1016023

Source: cve@mitre.org

Exploit

http://www.osvdb.org/25246

Source: cve@mitre.org

Patch

http://www.osvdb.org/25247

Source: cve@mitre.org

Patch

http://www.securityfocus.com/archive/1/432725/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17796

Source: cve@mitre.org

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/26223

Source: cve@mitre.org

http://secunia.com/advisories/19933