Vulnerabilities > CVE-2006-4708 - Cross-Site Scripting vulnerability in Vikingboard 0.1B

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
vikingboard
exploit available

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php.

Vulnerable Configurations

Part Description Count
Application
Vikingboard
1

Exploit-Db

  • descriptionVikingboard Viking board 0.1b help.php act Parameter XSS. CVE-2006-4708. Webapps exploit for php platform
    idEDB-ID:28497
    last seen2016-02-03
    modified2006-09-08
    published2006-09-08
    reporterHessam-x
    sourcehttps://www.exploit-db.com/download/28497/
    titleVikingboard Viking board 0.1b help.php act Parameter XSS
  • descriptionVikingboard Viking board 0.1b report.php p Parameter XSS. CVE-2006-4708. Webapps exploit for php platform
    idEDB-ID:28498
    last seen2016-02-03
    modified2006-09-08
    published2006-09-08
    reporterHessam-x
    sourcehttps://www.exploit-db.com/download/28498/
    titleVikingboard Viking board 0.1b report.php p Parameter XSS