CVE-2006-2524

Published: May 22, 2006Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when processing the user date format.

Affected (1)

Products: Usebb: Usebb

Usebb

1 product

Usebb

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Usebb Usebb	Version 1.0_rc1

References (12)

http://secunia.com/advisories/20187

Source: cve@mitre.org

PatchVendor Advisory

http://sourceforge.net/project/shownotes.php?release_id=418462&group_id=93103

Source: cve@mitre.org

Patch

http://www.osvdb.org/25684

Source: cve@mitre.org

http://www.usebb.net/community/topic.php?id=1130

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/1900

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26600

Source: cve@mitre.org

http://secunia.com/advisories/20187