CVE-2006-1034
Woltlab Burning Board - Cross-Site Scripting via Username Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-1034. PoCs published by botan.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in Woltlab Burning Board, where user-supplied input is not properly sanitized. The example URL demonstrates how arbitrary script code could be executed in the context of the affected site.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to galerie_index.php and possibly (2) galerie_onfly.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. The second vector might not be XSS.
Exploits (2)
The provided text describes a cross-site scripting (XSS) vulnerability in Woltlab Burning Board, where user-supplied input is not properly sanitized. The example URL demonstrates how arbitrary script code could be executed in the context of the affected site.
This exploit demonstrates a reflected XSS vulnerability in Woltlab Burning Board due to insufficient input sanitization. The PoC injects a script tag into the 'username' parameter to execute arbitrary JavaScript in the context of the affected site.