CVEvulnerability
CVE-2006-0124
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-01-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field.
Affected configurations
• adn forum adn forum 1.0
• adn forum adn forum 1.0b
References
- http://evuln.com/vulns/15/summary.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18300 Vendor Advisory
- http://securitytracker.com/id?1015445 securitytracker.com
- http://www.osvdb.org/22242 www.osvdb.org
- http://www.securityfocus.com/archive/1/420990/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16157 Exploit
- http://www.vupen.com/english/advisories/2006/0077 www.vupen.com
- http://evuln.com/vulns/15/summary.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18300 Vendor Advisory
- http://securitytracker.com/id?1015445 securitytracker.com
- http://www.osvdb.org/22242 www.osvdb.org
- http://www.securityfocus.com/archive/1/420990/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16157 Exploit
- http://www.vupen.com/english/advisories/2006/0077 www.vupen.com