How severe is CVE-2006-0102?

CVE-2006-0102 has a CVSS 2.0 base score of 4.3, rated medium severity.

Is CVE-2006-0102 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (70th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2006-0102?

CVE-2006-0102 primarily affects Ralph Capper Tinyphpforum. In total, 7 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2006-0102?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2006-0102 published?

CVE-2006-0102 was published on 2006-01-06 and last updated on 2026-06-16.

CVE-2006-0102

CVE-2006-0102 is a medium-severity vulnerability in Ralph Capper Tinyphpforum with a CVSS 2.0 base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.3)
EPSS exploit prediction: 1% (70th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Ralph Capper Tinyphpforum
Published: 2006-01-06
Last modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an "[a]" bbcode tag, possibly the txt parameter to action.php.

Frequently asked questions

What is CVE-2006-0102?: Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an "[a]" bbcode tag, possibly the txt parameter to action.php.
How severe is CVE-2006-0102?: CVE-2006-0102 has a CVSS 2.0 base score of 4.3, rated medium severity.
Is CVE-2006-0102 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (70th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2006-0102?: CVE-2006-0102 primarily affects Ralph Capper Tinyphpforum. In total, 7 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2006-0102?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2006-0102 published?: CVE-2006-0102 was published on 2006-01-06 and last updated on 2026-06-16.

References

Affected products (7)

cpe:2.3:a:ralph_capper:tinyphpforum:3.5:*:*:*:*:*:*:*
cpe:2.3:a:ralph_capper:tinyphpforum:3.6:*:*:*:*:*:*:*
cpe:2.3:a:ralph_capper:tinyphpforum:3.46:*:*:*:*:*:*:*
cpe:2.3:a:ralph_capper:tinyphpforum:3.47:*:*:*:*:*:*:*
cpe:2.3:a:ralph_capper:tinyphpforum:3.48:*:*:*:*:*:*:*
cpe:2.3:a:ralph_capper:tinyphpforum:3.49:*:*:*:*:*:*:*
cpe:2.3:a:ralph_capper:tinyphpforum:3.499:*:*:*:*:*:*:*

More vulnerabilities in Ralph Capper Tinyphpforum

CVE-2006-0103 — Medium (CVSS 5.0): TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web…
CVE-2006-0104 — Medium (CVSS 5.0): Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account,…
CVE-2006-1898 — Low (CVSS 2.6): Multiple cross-site scripting (XSS) vulnerabilities in Ralph Capper Tiny PHP Forum (TPF) 3.6 allow remote attackers to…

All CVEs affecting Ralph Capper Tinyphpforum →