CVE-2006-1202
UnknownEPSS 1.94%
Last modified
CVE-2006-1202 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mess and (2) user parameters in messanger.php, possibly requiring a URL encoded value.. EPSS estimates a 1.94% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mess and (2) user parameters in messanger.php, possibly requiring a URL encoded value.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Jcink.Com | Textfilebb | 1.0 |
References
- http://notlegal.ws/textfilebbmessanger.txtURL Repurposed
- http://secunia.com/advisories/19149Vendor Advisory
- http://notlegal.ws/textfilebbmessanger.txtURL Repurposed
- http://secunia.com/advisories/19149Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-1202?
Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mess and (2) user parameters in messanger.php, possibly requiring a URL encoded value.
How severe is CVE-2006-1202?
Severity scoring for CVE-2006-1202 is pending analysis. The EPSS model estimates a 1.94% probability of exploitation in the next 30 days.
How do I fix CVE-2006-1202?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-1196Multiple cross-site scripting (XSS) vulnerabilities in Qwiki…
- CVE-2006-1197SafeDisc installs the driver service for the secdrv.sys driv…
- CVE-2006-1198Comvigo IM Lock 2006 uses a simple substitution cipher to en…
- CVE-2006-1199Cross-site scripting (XSS) vulnerability in iframe.php in da…
- CVE-2006-1200Direct static code injection vulnerability in add_link.txt i…
- CVE-2006-1201Directory traversal vulnerability in resetpw.php in eschew.n…
- CVE-2006-1203PHP remote file include vulnerability in common.php in txtFo…
- CVE-2006-1204Multiple cross-site scripting (XSS) vulnerabilities in txtFo…
- CVE-2006-1205Multiple cross-site scripting (XSS) vulnerabilities in myWeb…
- CVE-2006-1206Matt Johnston Dropbear SSH server 0.47 and earlier, as used …
- CVE-2006-1207PHP Upload Center stores password hashes under the web root …
- CVE-2006-1208Sergey Korostel PHP Upload Center allows remote attackers to…
Are you affected by CVE-2006-1202?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST