SecuritySpace - CVE-2006-2228

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2006-2228

Description: Cross-site scripting (XSS) vulnerability in w-Agora (aka Web-Agora) 4.2.0 allows remote attackers to inject arbitrary web script or HTML via a post with a BBCode tag that contains a JavaScript event name followed by whitespace before the '=' (equals) character, which bypasses a restrictive regular expression that attempts to remove onmouseover and other events.

Test IDs: 1.3.6.1.4.1.25623.1.0.56816

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2006-2228
BugTraq ID: 17751
http://www.securityfocus.com/bid/17751
Bugtraq: 20060429 W-Agora 4.20 XSS (Google Search)
http://www.securityfocus.com/archive/1/432457/100/0/threaded
http://securityreason.com/securityalert/847

CVE ID:	CVE-2006-2228
Description:	Cross-site scripting (XSS) vulnerability in w-Agora (aka Web-Agora) 4.2.0 allows remote attackers to inject arbitrary web script or HTML via a post with a BBCode tag that contains a JavaScript event name followed by whitespace before the '=' (equals) character, which bypasses a restrictive regular expression that attempts to remove onmouseover and other events.
Test IDs:	1.3.6.1.4.1.25623.1.0.56816
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2228 BugTraq ID: 17751 http://www.securityfocus.com/bid/17751 Bugtraq: 20060429 W-Agora 4.20 XSS (Google Search) http://www.securityfocus.com/archive/1/432457/100/0/threaded http://securityreason.com/securityalert/847