GCVE - cpe:2.3:a:xennobb:xennobb:1.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:xennobb:xennobb:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4161`	vulnerable	2026-06-08 04:49:11.130549	Details available Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the category parameter. Published: 2006-08-16T21:00:00.000Z Updated: 2024-08-07T18:57:46.409Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19446 http://www.securityfocus.com/archive/1/442881/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/28337 http://securityreason.com/securityalert/1395 http://www.surfionline.com/security_advisories/20060810_xennobb_avatar_gallery_transversal.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3241`	vulnerable	2026-06-08 04:49:08.668136	Details available Cross-site scripting (XSS) vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter. Published: 2006-06-27T10:00:00.000Z Updated: 2024-08-07T18:23:21.208Z Open on db.gcve.eu Reference links http://secunia.com/advisories/20797 https://exchange.xforce.ibmcloud.com/vulnerabilities/27367 http://www.securityfocus.com/bid/18652 http://www.vupen.com/english/advisories/2006/2510 http://pridels0.blogspot.com/2006/06/xennobb-xss-vuln.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.