ID CVE-2005-4297
Summary Cross-site scripting (XSS) vulnerability in bbBoard 2.56 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly via the "keys" parameter.
References
Vulnerable Configurations
  • cpe:2.3:a:bbboard:bbboard:*:*:*:*:*:*:*:*
    cpe:2.3:a:bbboard:bbboard:*:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 08-03-2011 - 02:27)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:N
refmap via4
bid 15884
misc http://pridels0.blogspot.com/2005/12/bbboard-v2-xss-vuln.html
secunia 18091
vupen ADV-2005-2935
Last major update 08-03-2011 - 02:27
Published 16-12-2005 - 23:03
Back to Top