Vulnerability in Ukiweb Ukiboard
CVE-2006-1019
Cross-site scripting (XSS) vulnerability in fce.php in UKiBoard 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a BBCode url tag when using the show_post function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information, some of which reference a source URL that appears to be for an unrelated issue.
EPSS: 0.009 (57.3th percentile) — read the EPSS interpretation.
Affected products
- Ukiweb Ukiboard — versions 3.0.1
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)