CVE-2006-0974

CVE-2006-0974 describes a cross-site scripting vulnerability in failure.asp of Battleaxe bttlxeForum 2.0, exploitable via the err_txt parameter to inject arbitrary script/HTML. Affected component: failure.asp in Battleaxe bttlxeForum 2.0. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) w...