Security Advisory

CVE-2006-2497

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-05-20 02:59:00
Last updated 2024-08-07 17:51:04
Assigner mitre
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in AspBB 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter to default.asp or (2) get parameter to profile.asp.