CVE-2006-5060

2006-09-2800:00:00

mitre

www.cve.org

AI Score

5.8

Confidence

High

EPSS

0.047

Percentile

92.7%

JSON

Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot parameter in the forgot mode.

References

secunia.com/advisories/22077

securityreason.com/securityalert/1649

www.securityfocus.com/archive/1/446879/100/0/threaded

www.securityfocus.com/bid/20162

www.vupen.com/english/advisories/2006/3766

exchange.xforce.ibmcloud.com/vulnerabilities/29131