Vulnerability CVE-2006-6892
Published: 2006-12-31   Modified: 2012-02-12

Description:
Cross-site scripting (XSS) vulnerability in the GetLocation function in online.php in Jonathon J. Freeman OvBB 0.13a allows remote attackers to inject arbitrary web script or HTML via the aRequest variable.

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.8/10
6.4/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Jonathon freeman -> OVBB 

 References:
http://www.ovbb.org/forums/thread.php?threadid=185
http://www.vupen.com/english/advisories/2007/0039
http://secunia.com/advisories/23484
Copyright 2024, cxsecurity.com

 

Back to Top