Vulnerabilities > CVE-2006-0149 - Cross-Site Scripting vulnerability in Simpbook 1.0

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
simpbook

Summary

Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to inject arbitrary web script or HTML via the message field.

Vulnerable Configurations

Part Description Count
Application
Simpbook
1