CVE-2006-3308

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-29 · updated 2026-06-16

Description

Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has unknown impact and remote attack vectors via [img] tags, possibly cross-site scripting (XSS).

Affected products

Zoid Technologies Project Eros Bbsengine: through 2006-06-21; 2006-02-23, 2006-04-29, 2006-05-01, 2006-05-09, 2006-05-10, 2006-05-12 (+2)

References

http://secunia.com/advisories/20760
http://sourceforge.net/project/shownotes.php?release_id=427430&group_id=86388
http://www.securityfocus.com/bid/18627
http://www.vupen.com/english/advisories/2006/2503
https://exchange.xforce.ibmcloud.com/vulnerabilities/27488
http://secunia.com/advisories/20760
http://sourceforge.net/project/shownotes.php?release_id=427430&group_id=86388
http://www.securityfocus.com/bid/18627
http://www.vupen.com/english/advisories/2006/2503
https://exchange.xforce.ibmcloud.com/vulnerabilities/27488

Get alerted when CVE-2006-3308 or the next vulnerability affects your stack