cbcvebase.
CVE-2006-6421
published 2006-12-10

CVE-2006-6421: Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject…

PriorityP427medium6CVSS 2.0
AVNACMAuSCPIPAP
EXPLOIT
EPSS
15.00%
96.3th percentile
Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user.

Affected

32 ranges· showing 25
VendorProductVersion rangeFixed in
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.