CVE-2006-1222: Zeroboard

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user email, and (3) homepage fields.

Affected products

• Zeroboard Zeroboard: version 4.1_pl2 only; version 4.1_pl3 only; version 4.1_pl4 only; version 4.1_pl5 only; version 4.1_pl6 only; version 4.1_pl7 only

Published 2006-03-14. Last modified 2026-06-16.