CVE-2006-2524

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-22 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when processing the user date format.

Affected products

UseBB: 1.0_rc1

References

http://secunia.com/advisories/20187
http://sourceforge.net/project/shownotes.php?release_id=418462&group_id=93103
http://www.osvdb.org/25684
http://www.usebb.net/community/topic.php?id=1130
http://www.vupen.com/english/advisories/2006/1900
https://exchange.xforce.ibmcloud.com/vulnerabilities/26600
http://secunia.com/advisories/20187
http://sourceforge.net/project/shownotes.php?release_id=418462&group_id=93103
http://www.osvdb.org/25684
http://www.usebb.net/community/topic.php?id=1130
http://www.vupen.com/english/advisories/2006/1900
https://exchange.xforce.ibmcloud.com/vulnerabilities/26600

Get alerted when CVE-2006-2524 or the next vulnerability affects your stack