CVE-2006-0110

CVE-2006-0110 describes a Cross-site scripting (XSS) vulnerability in the Foro Domus 2.10 component escribir.php, exploitable via the email parameter to inject arbitrary web script. The connected documents confirm the affected application and vulnerable parameter, but do not provide explicit reme...

CVE-2006-0159

CVE-2006-0159 is a SQL injection vulnerability in Foro Domus 2.10, specifically in escribir.php via the email parameter. According to the connected NVD entry, remote attackers can execute arbitrary SQL commands (AV:N/AC:L/Au:N/C:P/I:P/A:P). The affected component is Foro Domus 2.10, escribi r.php...

CVE-2007-0580

CVE-2007-0580 affects Foro Domus 2.10: PHP remote file inclusion in menu.php via the sesion_idioma parameter allows remote code execution. Root cause is including remote PHP files through a crafted URL. Public references indicate exploits exist (e.g., Exploit-DB), but remediation details are not ...