CVE-2006-1406

CVE-2006-1406 describes cross-site scripting (XSS) vulnerabilities in uniForum 4.0 and earlier, exploitable via the parameters txtuser or txtpassword in wbadmlog.aspx. The NVD entry notes remote injection of arbitrary script/HTML; no exploit details are provided in the connected documents. No rem...

CVE-2006-1406

Multiple cross-site scripting XSS vulnerabilities in wbadmlog.aspx in uniForum 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 txtuser or 2 txtpassword parameters...