6.8
CVSSv2

CVE-2006-1916

Published: 20/04/2006 Updated: 20/07/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in profile.php in DbbS 2.0-alpha and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) ulocation or (2) uhobbies parameters.

Vulnerable Product Search on Vulmon Subscribe to Product

dbbs dbbs 2.0

dbbs dbbs

Exploits

source: wwwsecurityfocuscom/bid/17559/info DbbS is prone to multiple input-validation vulnerabilities The issues include cross-site scripting and command-execution vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary scrip ...