CVE-2006-0156

Published: Jan 10, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in bbcode url tags in (1) addpost1.php and (2) addtopic1.php.

Affected (1)

Products: Foxrum: Foxrum

Foxrum

1 product

Foxrum

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Foxrum Foxrum	Version 4.0.4f

References (14)

http://evuln.com/vulns/20

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/18386

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/325

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/421277/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16172

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0121

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24043

Source: cve@mitre.org

http://evuln.com/vulns/20