CVE-2006-2815
Multiple cross-site scripting (XSS) vulnerabilities in Two Shoes M-Factory (TSMF) SimpleBoard 1.1.0 Stable (aka com_simpleboard), as used…
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
Multiple cross-site scripting (XSS) vulnerabilities in Two Shoes M-Factory (TSMF) SimpleBoard 1.1.0 Stable (aka com_simpleboard), as used in Mambo and Joomla!, allow remote attackers to inject arbitrary web script or HTML via (1) the Name field in "post ne topic" in the Frontend, (2) the Title (aka Community-Title) field in Simpleboard Configuration in the Backend Admin Panel, and the (3) Name (aka Forum-Title) and (4) Name (aka Category-Title) fields in Simpleboard Administration in the Backend Admin Panel. NOTE: some sources have stated that the sb_authorname parameter is affected, but it is unclear which field is related to it.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
- EPSS (exploitation in 30 days)
- 1.5% · top 26% of all CVEs (5 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.8.
Weakness
Affected products
n/a
- affected n/a
References (7)
- 20409 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 20060601 Joomla/Mambo CMS Component SimpleBoard 1.1 XSS-Vulnerabilities (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20060601 Joomla/Mambo CMS Component SimpleBoard 1.1 XSS-Vulnerabilities (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
- simpleboard-multiple-xss(27021) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- ADV-2006-2111 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 1030 (opens in a new tab)third-party-advisoryx_refsource_SREASONx_transferred
- 18251 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2006-2815)Record last updated .