{"api_version":"1","generated_at":"2026-07-23T09:47:29+00:00","cve":"CVE-2006-4708","urls":{"html":"https://cve.report/CVE-2006-4708","api":"https://cve.report/api/cve/CVE-2006-4708.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-4708","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-4708"},"summary":{"title":"CVE-2006-4708","description":"Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-09-12 16:07:00","updated_at":"2018-10-17 21:39:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://securityreason.com/securityalert/1539","name":"1539","refsource":"SREASON","tags":[],"title":"SecurityReason - Vikingboard 0.1b Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/19916","name":"19916","refsource":"BID","tags":["Exploit"],"title":"Vikingboard Multiple Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/445719/100/0/threaded","name":"20060908 Vikingboard 0.1b Multiple Vulnerabilities","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4708","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4708","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"4708","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vikingboard","cpe5":"vikingboard","cpe6":"0.1b","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4708","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vikingboard","cpe5":"vikingboard","cpe6":"0.1b","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-4708","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"19916","refsource":"BID","url":"http://www.securityfocus.com/bid/19916"},{"name":"20060908 Vikingboard 0.1b Multiple Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/445719/100/0/threaded"},{"name":"1539","refsource":"SREASON","url":"http://securityreason.com/securityalert/1539"}]}},"nvd":{"publishedDate":"2006-09-12 16:07:00","lastModifiedDate":"2018-10-17 21:39:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"severity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:vikingboard:vikingboard:0.1b:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"4708","Ordinal":"20045","Title":"CVE-2006-4708","CVE":"CVE-2006-4708","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"4708","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"4708","Ordinal":"2","NoteData":"2006-09-12","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"4708","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}