CVE-2006-0124

2006-01-0911:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.3%

JSON

Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the “Topic name” field.

References

evuln.com/vulns/15/summary.html

secunia.com/advisories/18300

securitytracker.com/id?1015445

www.osvdb.org/22242

www.securityfocus.com/archive/1/420990/100/0/threaded

www.securityfocus.com/bid/16157

www.vupen.com/english/advisories/2006/0077