CVE-2006-2188

Multiple cross-site scripting (XSS) vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Body field of a private message (PM), (2) BBCode, or (3) a forum post.

• http://secunia.com/advisories/19933Vendor Advisory
• http://securityreason.com/securityalert/838
• http://securitytracker.com/id?1016023Exploit
• http://www.osvdb.org/25246Patch
• http://www.osvdb.org/25247Patch
• http://www.securityfocus.com/archive/1/432725/100/0/threaded
• http://www.securityfocus.com/bid/17796Exploit, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26223
• http://secunia.com/advisories/19933Vendor Advisory
• http://securityreason.com/securityalert/838
• http://securitytracker.com/id?1016023Exploit
• http://www.osvdb.org/25246Patch
• http://www.osvdb.org/25247Patch
• http://www.securityfocus.com/archive/1/432725/100/0/threaded
• http://www.securityfocus.com/bid/17796Exploit, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26223

Published

May 4, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2182Multiple PHP remote file inclusion vulnerabilities in (1) ed…
• CVE-2006-2183Untrusted search path vulnerability in Truecrypt 4.1, when r…
• CVE-2006-2184Cross-site scripting (XSS) vulnerability in search.php in PH…
• CVE-2006-2185PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and…
• CVE-2006-2186zenphoto 1.0.1 beta and earlier allow remote attackers to ob…
• CVE-2006-2187Multiple cross-site scripting (XSS) vulnerabilities in zenph…
• CVE-2006-2189SQL injection vulnerability in search.php in Servous sBLOG 0…
• CVE-2006-2190Cross-site scripting (XSS) vulnerability in ow-shared.pl in …
• CVE-2006-2191Format string vulnerability in Mailman before 2.1.9 allows a…
• CVE-2006-2192Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2006-2193Buffer overflow in the t2p_write_pdf_string function in tiff…
• CVE-2006-2194The winbind plugin in pppd for ppp 2.4.4 and earlier does no…