CVE-2006-2167: Sloughflash Sf-Users

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers to inject arbitrary web script or HTML by setting the username field to contain JavaScript in the SRC attribute of an IMG element.

Affected products

• Sloughflash Sf-Users: version 1.0 only

Published 2006-05-04. Last modified 2026-06-16.