← Database

CVE-2006-0165

MEDIUM CVSS: 4.3 Published: 2006-01-11 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote attackers to inject arbitrary Javascript via the (1) url and (2) name field of the default email form.

Affected Platforms

Plain Black Webgui

Weakness Type

NVD-CWE-Other

References