Approved changes feed: RSS · Atom

cpe:2.3:a:azbb:az_bulletin_board:1.0.12:*:*:*:*:*:*:*

part: a version: 1.0.12 update: *

VendorAzbb (118f7e1e-eda9-5239-b4a6-791999a5c3e8)
ProductAz Bulletin Board (2661239d-9f1a-5880-85fd-314b96e2481d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-0407 vulnerable 2026-06-08 04:48:53.729399 Details available
Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) nickname parameter and (2) an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a correction was later provided. NOTE: followup posts have both disputed and confirmed the original claim.
Published: 2006-01-25T02:00:00.000Z
Updated: 2024-08-07T16:34:14.856Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.