CVE-2006-1891

Cross-site scripting (XSS) vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML via a user's profile, possibly using the FormVal_profile parameter. NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability. If it is site-specific, then it should not be included in CVE.

• http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045194.html
• http://secunia.com/advisories/19700Vendor Advisory
• http://securityreason.com/securityalert/724
• http://securityreason.com/securityalert/765
• http://securitytracker.com/id?1015955
• http://www.securityfocus.com/archive/1/431116/100/0/threaded
• http://www.securityfocus.com/bid/17556
• http://www.vupen.com/english/advisories/2006/1377
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25838
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045194.html
• http://secunia.com/advisories/19700Vendor Advisory
• http://securityreason.com/securityalert/724
• http://securityreason.com/securityalert/765
• http://securitytracker.com/id?1015955
• http://www.securityfocus.com/archive/1/431116/100/0/threaded
• http://www.securityfocus.com/bid/17556
• http://www.vupen.com/english/advisories/2006/1377
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25838

Published

Apr 20, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1885Multiple unspecified vulnerabilities in the Reporting Framew…
• CVE-2006-1886Unspecified vulnerability in the PeopleTools component in Or…
• CVE-2006-1887Unspecified vulnerability in Oracle JD Edwards EnterpriseOne…
• CVE-2006-1888phpGraphy 0.9.11 and earlier allows remote attackers to bypa…
• CVE-2006-1889Cross-site scripting (XSS) vulnerability in the search actio…
• CVE-2006-1890Multiple PHP remote file inclusion vulnerabilities in myWebl…
• CVE-2006-1892avast! 4 Linux Home Edition 1.0.5 allows local users to modi…
• CVE-2006-1893Cross-site scripting (XSS) vulnerability in print.php in ar-…
• CVE-2006-1894Cross-site scripting (XSS) vulnerability in RevoBoard 1.8, a…
• CVE-2006-1895Direct static code injection vulnerability in includes/templ…
• CVE-2006-1896Unspecified vulnerability in phpBB allows remote authenticat…
• CVE-2006-1897Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL f…