← Database

CVE-2006-6040

MEDIUM CVSS: 6.8 Published: 2006-11-22 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6.x allow remote attackers to inject arbitrary web script or HTML via (1) the prefs parameter in a buildnavprefs action or (2) the navprefs parameter in a savenavprefs action.

Affected Platforms

Jelsoft Vbulletin

Weakness Type

NVD-CWE-Other

References