CVE-2006-0407: Azbb Az Bulletin Board

Medium severity, CVSS 4.3. EPSS: 2.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) nickname parameter and (2) an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a correction was later provided. NOTE: followup posts have both disputed and confirmed the original claim.

Affected products

• Azbb Az Bulletin Board: version 1.0.0 only; version 1.0.0rc1 only; version 1.0.0rc2 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; …

Published 2006-01-25. Last modified 2026-06-16.