CVE-2006-3308

CRITICAL 9.3CVE-2006-3308 · Published 29/06/2006 · updated 16/06/2026

In short

CVE-2006-3308 is a CRITICAL (CVSS 9.3) vulnerability affecting project eros bbsengine (zoid technologies).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
project eros bbsengine zoid_technologies	`= 2006-02-23= 2006-04-29= 2006-05-01= 2006-05-09= 2006-05-10= 2006-05-12= 2006-05-19= 2006-05-20≤ 2006-06-21`	No fix yet

Description

Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has unknown impact and remote attack vectors via [img] tags, possibly cross-site scripting (XSS).

References

secunia.com/advisories/20760 · Patch
sourceforge.net/project/shownotes.php · Patch
securityfocus.com/bid/18627 · Patch
vupen.com/english/advisories/2006/2503
exchange.xforce.ibmcloud.com/vulnerabilities/27488

More vulnerabilities in project eros bbsengine

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free