CVE-2006-0102

Description

Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an "%5b.%5d" bbcode tag, possibly the txt parameter to action.php.

CVSS Version 2.0

nvd
CVE ID: CVE-2006-0102
Base Score: 4.3
Base Severity: MEDIUM
Vector String:AV:N/AC:M/Au:N/C:N/I:P/A:N

Refrence: NVD

Description​

Description