CVE-2005-4311

Published: Dec 17, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via (1) the page parameter in dcboard.php and (2) unspecified search parameters.

Affected (16)

Products: Dcscripts: Dcforum+

Dcscripts

1 product

Dcforum+

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Dcscripts Dcforum	Version 2000_1.1
Dcscripts Dcforum	Version 2k_1.1
Dcscripts Dcforum	Version 5.11
Dcscripts Dcforum	Version 6.0
Dcscripts Dcforum	Version 6.1
Dcscripts Dcforum	Version 6.21
Dcscripts Dcforum	Version 6.22
Dcscripts Dcforum	Version 6.23
Dcscripts Dcforum	Version 6.25
Dcscripts Dcforum	Version 6.2
Dcscripts Dcforum+	Version 1.001
Dcscripts Dcforum+	Version 1.002
Dcscripts Dcforum+	Version 1.003
Dcscripts Dcforum+	Version 1.0
Dcscripts Dcforum+	Version 1.1
Dcscripts Dcforum+	Version 1.2