CVE-2006-4708

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-09-12 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php.

Affected products

Vikingboard: 0.1b

References

http://securityreason.com/securityalert/1539
http://www.securityfocus.com/archive/1/445719/100/0/threaded
http://www.securityfocus.com/bid/19916
http://securityreason.com/securityalert/1539
http://www.securityfocus.com/archive/1/445719/100/0/threaded
http://www.securityfocus.com/bid/19916

Get alerted when CVE-2006-4708 or the next vulnerability affects your stack