CVE-2006-6721

Knusperleicht ShoutBox 2.6 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) sbNick or (2) sbKommentar parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by IMHOT3B · htmlwebappsphp

https://www.exploit-db.com/exploits/29294

View Code ZIP pw:eip

References (3)

[Exploit] http://www.securityfocus.com/data/vulnerabilities/exploits/21637.html

[Third Party Advisory] http://secunia.com/advisories/23526

[Exploit] http://www.securityfocus.com/bid/21637

Scores

EPSS 0.0040

EPSS Percentile 60.8%

Details

Status published

Products (1)

knusperleicht/shoutbox 2.6

Published Dec 23, 2006

Tracked Since Feb 18, 2026