CVE-2006-1894 | BDVDB-2026-16388 Detail

Description#

Cross-site scripting (XSS) vulnerability in RevoBoard 1.8, as derived from PunBB, allows remote attackers to inject arbitrary web script or HTML via a substitution cipher of the email tag, which is transformed when the application's e-mail address obfuscator reverses the transformation. NOTE: it is not clear whether this is a site-specific issue; however, the claimed codebase relationship with PunBB might be relevant.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/768
http://www.securityfocus.com/archive/1/430886/100/0/threaded

Exploit#

No public exploit known

History#

Version 12006-04-20Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.