VulnerabilityModified
CVE-2006-0124
Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field.
MEDIUM 4.3EPSS 1.43%
Does this matter?
Lower severity and a low EPSS score (1.43%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.43% probability · 71th percentile
- CISA KEV
- Not listed
- Affected
- adn forum/adn forum
- Source
- cve@mitre.org
References
- http://evuln.com/vulns/15/summary.htmlExploit, Vendor Advisory
- http://secunia.com/advisories/18300Vendor Advisory
- http://securitytracker.com/id?1015445
- http://www.osvdb.org/22242
- http://www.securityfocus.com/archive/1/420990/100/0/threaded
- http://www.securityfocus.com/bid/16157Exploit
- http://www.vupen.com/english/advisories/2006/0077
- http://evuln.com/vulns/15/summary.htmlExploit, Vendor Advisory
- http://secunia.com/advisories/18300Vendor Advisory
- http://securitytracker.com/id?1015445
- http://www.osvdb.org/22242
- http://www.securityfocus.com/archive/1/420990/100/0/threaded
- http://www.securityfocus.com/bid/16157Exploit
- http://www.vupen.com/english/advisories/2006/0077
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.