{"id":"CVE-2006-4708","aliases":["EUVD-2006-4695","GHSA-2jrh-pfc7-jq84"],"status":"published","title":"Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to...","description":"Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01967,"percentile":0.80512,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2006-09-12T16:00:00Z","modified":"2026-06-16T22:29:37Z","exploits":[{"source":"exploitdb","id":"EDB-28497","title":"Vikingboard 0.1b - 'help.php' Cross-Site Scripting","type":"webapps","platform":"php","date":"2006-09-08","verified":true,"url":"https://www.exploit-db.com/exploits/28497"},{"source":"exploitdb","id":"EDB-28498","title":"Vikingboard 0.1b - 'report.php' Cross-Site Scripting","type":"webapps","platform":"php","date":"2006-09-08","verified":true,"url":"https://www.exploit-db.com/exploits/28498"}],"products":[{"vendor":"vikingboard","product":"vikingboard"}],"references":[{"url":"http://www.securityfocus.com/bid/19916","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/archive/1/445719/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://securityreason.com/securityalert/1539","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4708"},{"url":"https://github.com/advisories/GHSA-2jrh-pfc7-jq84"}],"sources":{"cve":[{"id":"CVE-2006-4708","description":"Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php.","status":"published","published":"2006-09-12T16:00:00Z","modified":"2024-08-07T19:23:40.919Z","updated_at":"2026-11-02T14:33:51.085765Z"}],"euvd":[{"id":"EUVD-2006-4695","description":"Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php.","status":"published","published":"2006-09-12T16:00:00Z","modified":"2024-08-07T19:23:40Z","updated_at":"2026-11-03T01:15:50.798383Z"}],"ghsa":[{"id":"GHSA-2jrh-pfc7-jq84","title":"Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to...","description":"Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php.","status":"published","published":"2022-05-01T07:21:16Z","modified":"2023-01-31T05:01:57Z","updated_at":"2026-11-02T14:48:10.096738Z"}],"nvd":[{"id":"CVE-2006-4708","description":"Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php.","status":"published","published":"2006-09-12T16:07:00Z","modified":"2026-06-16T22:29:37.71Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:05.928789Z"}]}}