CVEvulnerability
CVE-2006-3321
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in openforum.asp in OpenForum 1.2 Beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ofdisp and (2) ofmsgid parameters.
Affected configurations
• 2enetworx openforum (<= 1.2 beta)
References
- http://pridels0.blogspot.com/2006/06/openforum-xss-vuln.html pridels0.blogspot.com
- http://www.osvdb.org/27623 www.osvdb.org
- http://www.securityfocus.com/bid/19266 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27361 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2006/06/openforum-xss-vuln.html pridels0.blogspot.com
- http://www.osvdb.org/27623 www.osvdb.org
- http://www.securityfocus.com/bid/19266 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27361 exchange.xforce.ibmcloud.com