CVE-2006-0124

Published: Jan 9, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field.

Affected (2)

Products: Adn Forum: Adn Forum

Adn Forum

1 product

Adn Forum

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Adn Forum Adn Forum	Version 1.0
Adn Forum Adn Forum	Version 1.0b

References (14)

http://evuln.com/vulns/15/summary.html

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/18300

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015445

Source: cve@mitre.org

http://www.osvdb.org/22242

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/420990/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16157

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/0077

Source: cve@mitre.org

http://evuln.com/vulns/15/summary.html