GCVE - cpe:2.3:a:wired_community_software:wwwthreads:rc3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wired_community_software:wwwthreads:rc3:*:*:*:*:*:*:*

part: a version: rc3 update: *

Vendor	Wired Community Software (`ec71b0bd-24be-5e2b-8d95-2c42b3f1157f`)
Product	Wwwthreads (`ea0e99d1-5a38-54de-88cb-48ef2b1f888e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-5059`	vulnerable	2026-06-08 04:49:19.600040	Details available Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to (1) dosearch.php, (2) postlist.php, (3) showmembers.php, (4) faq_english.php, (5) online.php, (6) login.php, (7) newuser.php, (8) wwwthreads.php, (9) search.php, or (10) postlist.php. Published: 2006-09-28T00:00:00.000Z Updated: 2024-08-07T19:32:23.313Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/1645 http://www.vupen.com/english/advisories/2006/3858 http://www.securityfocus.com/archive/1/446911/100/0/threaded http://secunia.com/advisories/22211 http://www.securityfocus.com/bid/20178	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3909`	vulnerable	2026-06-08 04:49:10.492491	Details available Cross-site scripting (XSS) vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web script or HTML via the week parameter. Published: 2006-07-27T22:00:00.000Z Updated: 2024-08-07T18:48:39.242Z Open on db.gcve.eu Reference links http://secunia.com/advisories/21221 http://www.securityfocus.com/archive/1/441191/100/0/threaded http://www.osvdb.org/27542 https://exchange.xforce.ibmcloud.com/vulnerabilities/27997 http://www.aria-security.net/advisory/wwwthreads.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1958`	vulnerable	2026-06-08 04:48:58.494846	Details available Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via (1) the forumreferrer cookie to register.php and (2) the messages parameter in message_list.php. Published: 2006-04-21T10:00:00.000Z Updated: 2024-08-07T17:35:30.278Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/739 https://exchange.xforce.ibmcloud.com/vulnerabilities/25936 http://www.vupen.com/english/advisories/2006/1447 http://www.securityfocus.com/bid/17615 http://secunia.com/advisories/19732	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Wwwthreads

Notes

PURL mappings

Vulnerability references

Contribute