CVE-2006-0159: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained...

CVE-2006-0110: Undefined Security Weakness

Cross-site scripting XSS vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter...

CVE-2006-0110

CVE-2006-0110 describes a Cross-site scripting (XSS) vulnerability in the Foro Domus 2.10 component escribir.php, exploitable via the email parameter to inject arbitrary web script. The connected documents confirm the affected application and vulnerable parameter, but do not provide explicit reme...