CVE-2006-1810

Severity: low (CVSS 1.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-04-18 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the (1) ICQ, (2) AIM, (3) MSN, (4) Google Talk, (5) Website Name, (6) Website Address, (7) Email Address, (8) Location, (9) Signature, and (10) Sub-Titles fields in the user profile.

Affected products

Flexbb: 0.5.5_beta

References

http://www.securityfocus.com/archive/1/431121/100/0/threaded
http://www.securityfocus.com/bid/17539
http://www.securityfocus.com/archive/1/431121/100/0/threaded
http://www.securityfocus.com/bid/17539

Get alerted when CVE-2006-1810 or the next vulnerability affects your stack