CVE-2006-1414

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-28 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in toast.asp in Toast Forums 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, (3) message, or (4) dayprune parameter.

Affected products

Toast Forums: 1.6

References

http://pridels0.blogspot.com/2006/03/xss-in-toast-forums-16.html
http://secunia.com/advisories/19401
http://www.osvdb.org/24119
http://www.securityfocus.com/bid/17249
http://www.vupen.com/english/advisories/2006/1092
https://exchange.xforce.ibmcloud.com/vulnerabilities/25440
http://pridels0.blogspot.com/2006/03/xss-in-toast-forums-16.html
http://secunia.com/advisories/19401
http://www.osvdb.org/24119
http://www.securityfocus.com/bid/17249
http://www.vupen.com/english/advisories/2006/1092
https://exchange.xforce.ibmcloud.com/vulnerabilities/25440

Get alerted when CVE-2006-1414 or the next vulnerability affects your stack