Search
Find a vulnerability
Search criteria
8 vulnerabilities found for tinyphpforum by ralph_capper
CVE-2006-1898 (GCVE-0-2006-1898)
Vulnerability from nvd – Published: 2006-04-20 10:00 – Updated: 2024-08-07 17:27
VLAI
EPSS
VEX
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Ralph Capper Tiny PHP Forum (TPF) 3.6 allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in a view action in profile.php and (2) a login name. NOTE: the "Access to hash password" issue is already covered by CVE-2006-0103.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securityreason.com/securityalert/728 | third-party-advisoryx_refsource_SREASON |
| http://www.securityfocus.com/bid/17553 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/773 | third-party-advisoryx_refsource_SREASON |
| http://www.securityfocus.com/archive/1/431133/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2006-04-17 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:27:29.454Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "tinyphpforum-profile-error-xss(25856)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25856"
},
{
"name": "728",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/728"
},
{
"name": "17553",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17553"
},
{
"name": "773",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/773"
},
{
"name": "20060417 Tiny PHP forum - vulns",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/431133/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-04-17T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Ralph Capper Tiny PHP Forum (TPF) 3.6 allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in a view action in profile.php and (2) a login name. NOTE: the \"Access to hash password\" issue is already covered by CVE-2006-0103."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "tinyphpforum-profile-error-xss(25856)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25856"
},
{
"name": "728",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/728"
},
{
"name": "17553",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17553"
},
{
"name": "773",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/773"
},
{
"name": "20060417 Tiny PHP forum - vulns",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/431133/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1898",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Ralph Capper Tiny PHP Forum (TPF) 3.6 allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in a view action in profile.php and (2) a login name. NOTE: the \"Access to hash password\" issue is already covered by CVE-2006-0103."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "tinyphpforum-profile-error-xss(25856)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25856"
},
{
"name": "728",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/728"
},
{
"name": "17553",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17553"
},
{
"name": "773",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/773"
},
{
"name": "20060417 Tiny PHP forum - vulns",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/431133/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1898",
"datePublished": "2006-04-20T10:00:00.000Z",
"dateReserved": "2006-04-20T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:27:29.454Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0103 (GCVE-0-2006-0103)
Vulnerability from nvd – Published: 2006-01-06 11:00 – Updated: 2024-08-07 16:25
VLAI
EPSS
VEX
Summary
TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1015436 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/archive/1/420933/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.osvdb.org/22257 | vdb-entryx_refsource_OSVDB |
| http://www.vupen.com/english/advisories/2006/0054 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/18293 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/320 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://evuln.com/vulns/14/summary.html | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/431133/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2006-01-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:25:33.503Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1015436",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "22257",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22257"
},
{
"name": "ADV-2006-0054",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/320"
},
{
"name": "tinyphpforum-users-information-disclosure(24016)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24016"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/14/summary.html"
},
{
"name": "20060417 Tiny PHP forum - vulns",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/431133/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1015436",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "22257",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22257"
},
{
"name": "ADV-2006-0054",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/320"
},
{
"name": "tinyphpforum-users-information-disclosure(24016)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24016"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/14/summary.html"
},
{
"name": "20060417 Tiny PHP forum - vulns",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/431133/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0103",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1015436",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "22257",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22257"
},
{
"name": "ADV-2006-0054",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/320"
},
{
"name": "tinyphpforum-users-information-disclosure(24016)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24016"
},
{
"name": "http://evuln.com/vulns/14/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/14/summary.html"
},
{
"name": "20060417 Tiny PHP forum - vulns",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/431133/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0103",
"datePublished": "2006-01-06T11:00:00.000Z",
"dateReserved": "2006-01-06T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:25:33.503Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0102 (GCVE-0-2006-0102)
Vulnerability from nvd – Published: 2006-01-06 11:00 – Updated: 2024-08-07 16:25
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an "[a]" bbcode tag, possibly the txt parameter to action.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1015436 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/22256 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/420933/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.vupen.com/english/advisories/2006/0054 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/18293 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/320 | third-party-advisoryx_refsource_SREASON |
| http://evuln.com/vulns/14/summary.html | x_refsource_MISC |
Date Public
2006-01-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:25:32.865Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1015436",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "22256",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22256"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "ADV-2006-0054",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/320"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/14/summary.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an \"[a]\" bbcode tag, possibly the txt parameter to action.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1015436",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "22256",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22256"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "ADV-2006-0054",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/320"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/14/summary.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0102",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an \"[a]\" bbcode tag, possibly the txt parameter to action.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1015436",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "22256",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22256"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "ADV-2006-0054",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/320"
},
{
"name": "http://evuln.com/vulns/14/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/14/summary.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0102",
"datePublished": "2006-01-06T11:00:00.000Z",
"dateReserved": "2006-01-06T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:25:32.865Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0104 (GCVE-0-2006-0104)
Vulnerability from nvd – Published: 2006-01-06 11:00 – Updated: 2024-08-07 16:25
VLAI
EPSS
VEX
Summary
Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a .. (dot dot) in the uname parameter to profile.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://evuln.com/vulns/14/exploit.html | x_refsource_MISC |
| http://securitytracker.com/id?1015436 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/archive/1/420933/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.vupen.com/english/advisories/2006/0054 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/18293 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/320 | third-party-advisoryx_refsource_SREASON |
| http://evuln.com/vulns/14/summary.html | x_refsource_MISC |
| http://www.securityfocus.com/bid/16163 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/22258 | vdb-entryx_refsource_OSVDB |
Date Public
2006-01-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:25:32.863Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/14/exploit.html"
},
{
"name": "1015436",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "ADV-2006-0054",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/320"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/14/summary.html"
},
{
"name": "16163",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16163"
},
{
"name": "22258",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22258"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a .. (dot dot) in the uname parameter to profile.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/14/exploit.html"
},
{
"name": "1015436",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "ADV-2006-0054",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/320"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/14/summary.html"
},
{
"name": "16163",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16163"
},
{
"name": "22258",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22258"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0104",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a .. (dot dot) in the uname parameter to profile.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://evuln.com/vulns/14/exploit.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/14/exploit.html"
},
{
"name": "1015436",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "ADV-2006-0054",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/320"
},
{
"name": "http://evuln.com/vulns/14/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/14/summary.html"
},
{
"name": "16163",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16163"
},
{
"name": "22258",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22258"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0104",
"datePublished": "2006-01-06T11:00:00.000Z",
"dateReserved": "2006-01-06T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:25:32.863Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-1898 (GCVE-0-2006-1898)
Vulnerability from cvelistv5 – Published: 2006-04-20 10:00 – Updated: 2024-08-07 17:27
VLAI
EPSS
VEX
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Ralph Capper Tiny PHP Forum (TPF) 3.6 allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in a view action in profile.php and (2) a login name. NOTE: the "Access to hash password" issue is already covered by CVE-2006-0103.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securityreason.com/securityalert/728 | third-party-advisoryx_refsource_SREASON |
| http://www.securityfocus.com/bid/17553 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/773 | third-party-advisoryx_refsource_SREASON |
| http://www.securityfocus.com/archive/1/431133/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2006-04-17 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:27:29.454Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "tinyphpforum-profile-error-xss(25856)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25856"
},
{
"name": "728",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/728"
},
{
"name": "17553",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17553"
},
{
"name": "773",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/773"
},
{
"name": "20060417 Tiny PHP forum - vulns",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/431133/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-04-17T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Ralph Capper Tiny PHP Forum (TPF) 3.6 allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in a view action in profile.php and (2) a login name. NOTE: the \"Access to hash password\" issue is already covered by CVE-2006-0103."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "tinyphpforum-profile-error-xss(25856)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25856"
},
{
"name": "728",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/728"
},
{
"name": "17553",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17553"
},
{
"name": "773",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/773"
},
{
"name": "20060417 Tiny PHP forum - vulns",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/431133/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1898",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Ralph Capper Tiny PHP Forum (TPF) 3.6 allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in a view action in profile.php and (2) a login name. NOTE: the \"Access to hash password\" issue is already covered by CVE-2006-0103."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "tinyphpforum-profile-error-xss(25856)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25856"
},
{
"name": "728",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/728"
},
{
"name": "17553",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17553"
},
{
"name": "773",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/773"
},
{
"name": "20060417 Tiny PHP forum - vulns",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/431133/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1898",
"datePublished": "2006-04-20T10:00:00.000Z",
"dateReserved": "2006-04-20T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:27:29.454Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0103 (GCVE-0-2006-0103)
Vulnerability from cvelistv5 – Published: 2006-01-06 11:00 – Updated: 2024-08-07 16:25
VLAI
EPSS
VEX
Summary
TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1015436 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/archive/1/420933/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.osvdb.org/22257 | vdb-entryx_refsource_OSVDB |
| http://www.vupen.com/english/advisories/2006/0054 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/18293 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/320 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://evuln.com/vulns/14/summary.html | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/431133/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2006-01-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:25:33.503Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1015436",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "22257",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22257"
},
{
"name": "ADV-2006-0054",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/320"
},
{
"name": "tinyphpforum-users-information-disclosure(24016)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24016"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/14/summary.html"
},
{
"name": "20060417 Tiny PHP forum - vulns",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/431133/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1015436",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "22257",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22257"
},
{
"name": "ADV-2006-0054",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/320"
},
{
"name": "tinyphpforum-users-information-disclosure(24016)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24016"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/14/summary.html"
},
{
"name": "20060417 Tiny PHP forum - vulns",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/431133/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0103",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1015436",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "22257",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22257"
},
{
"name": "ADV-2006-0054",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/320"
},
{
"name": "tinyphpforum-users-information-disclosure(24016)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24016"
},
{
"name": "http://evuln.com/vulns/14/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/14/summary.html"
},
{
"name": "20060417 Tiny PHP forum - vulns",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/431133/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0103",
"datePublished": "2006-01-06T11:00:00.000Z",
"dateReserved": "2006-01-06T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:25:33.503Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0102 (GCVE-0-2006-0102)
Vulnerability from cvelistv5 – Published: 2006-01-06 11:00 – Updated: 2024-08-07 16:25
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an "[a]" bbcode tag, possibly the txt parameter to action.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1015436 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/22256 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/420933/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.vupen.com/english/advisories/2006/0054 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/18293 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/320 | third-party-advisoryx_refsource_SREASON |
| http://evuln.com/vulns/14/summary.html | x_refsource_MISC |
Date Public
2006-01-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:25:32.865Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1015436",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "22256",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22256"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "ADV-2006-0054",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/320"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/14/summary.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an \"[a]\" bbcode tag, possibly the txt parameter to action.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1015436",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "22256",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22256"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "ADV-2006-0054",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/320"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/14/summary.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0102",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an \"[a]\" bbcode tag, possibly the txt parameter to action.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1015436",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "22256",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22256"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "ADV-2006-0054",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/320"
},
{
"name": "http://evuln.com/vulns/14/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/14/summary.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0102",
"datePublished": "2006-01-06T11:00:00.000Z",
"dateReserved": "2006-01-06T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:25:32.865Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0104 (GCVE-0-2006-0104)
Vulnerability from cvelistv5 – Published: 2006-01-06 11:00 – Updated: 2024-08-07 16:25
VLAI
EPSS
VEX
Summary
Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a .. (dot dot) in the uname parameter to profile.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://evuln.com/vulns/14/exploit.html | x_refsource_MISC |
| http://securitytracker.com/id?1015436 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/archive/1/420933/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.vupen.com/english/advisories/2006/0054 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/18293 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/320 | third-party-advisoryx_refsource_SREASON |
| http://evuln.com/vulns/14/summary.html | x_refsource_MISC |
| http://www.securityfocus.com/bid/16163 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/22258 | vdb-entryx_refsource_OSVDB |
Date Public
2006-01-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:25:32.863Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/14/exploit.html"
},
{
"name": "1015436",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "ADV-2006-0054",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/320"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/14/summary.html"
},
{
"name": "16163",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16163"
},
{
"name": "22258",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22258"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a .. (dot dot) in the uname parameter to profile.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/14/exploit.html"
},
{
"name": "1015436",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "ADV-2006-0054",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/320"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/14/summary.html"
},
{
"name": "16163",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16163"
},
{
"name": "22258",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22258"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0104",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a .. (dot dot) in the uname parameter to profile.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://evuln.com/vulns/14/exploit.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/14/exploit.html"
},
{
"name": "1015436",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015436"
},
{
"name": "20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/420933/100/0/threaded"
},
{
"name": "ADV-2006-0054",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0054"
},
{
"name": "18293",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18293"
},
{
"name": "320",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/320"
},
{
"name": "http://evuln.com/vulns/14/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/14/summary.html"
},
{
"name": "16163",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16163"
},
{
"name": "22258",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22258"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0104",
"datePublished": "2006-01-06T11:00:00.000Z",
"dateReserved": "2006-01-06T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:25:32.863Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}