CVE-2006-0471

Cross-site scripting (XSS) vulnerability in the bbcode function in functions.php in my little homepage my little forum, as last modified in June 2005, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags.

• http://attrition.org/pipermail/vim/2006-January/000520.html
• http://evuln.com/vulns/51/
• http://evuln.com/vulns/51/summary.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/18628Exploit, Vendor Advisory
• http://www.osvdb.org/22856
• http://www.securityfocus.com/archive/1/423167/100/0/threaded
• http://www.securityfocus.com/bid/16395Exploit
• http://www.vupen.com/english/advisories/2006/0349
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24310
• http://attrition.org/pipermail/vim/2006-January/000520.html
• http://evuln.com/vulns/51/
• http://evuln.com/vulns/51/summary.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/18628Exploit, Vendor Advisory
• http://www.osvdb.org/22856
• http://www.securityfocus.com/archive/1/423167/100/0/threaded
• http://www.securityfocus.com/bid/16395Exploit
• http://www.vupen.com/english/advisories/2006/0349
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24310

Published

Jan 31, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0465Cross-site scripting (XSS) vulnerability in risultati_ricerc…
• CVE-2006-0466Cross-site scripting (XSS) vulnerability in search.asp in Go…
• CVE-2006-0467Unspecified vulnerability in Pioneers (formerly gnocatan) be…
• CVE-2006-0468CommuniGate Pro Core Server before 5.0.7 allows remote attac…
• CVE-2006-0469Cross-site scripting (XSS) vulnerability in UebiMiau 2.7.9, …
• CVE-2006-0470Cross-site scripting (XSS) vulnerability in search.php in My…
• CVE-2006-0472Cross-site scripting (XSS) vulnerability in guestbook.php in…
• CVE-2006-0473Cross-site scripting (XSS) vulnerability in the bbcode funct…
• CVE-2006-0474Multiple integer overflows in Shareaza 2.2.1.0 allow remote …
• CVE-2006-0475PHP-Ping 1.3 does not properly validate ping counts, which a…
• CVE-2006-0476Buffer overflow in Nullsoft Winamp 5.12 allows remote attack…
• CVE-2006-0477Buffer overflow in git-checkout-index in GIT before 1.1.5 al…