CVE-2006-1661

Published: Apr 7, 2006Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) areaID parameter in area.View.action, (2) time parameter in planning.View.action, and (3) userID parameter in user.View.action.

Affected (1)

Products: Sk Soft: Skforum

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sk Soft Skforum	version ≤ 1.5

References (16)

http://pridels0.blogspot.com/2006/04/skforum-xss-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/19484

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/24430

Source: cve@mitre.org

http://www.osvdb.org/24431

Source: cve@mitre.org

http://www.osvdb.org/24432

Source: cve@mitre.org

http://www.securityfocus.com/bid/17389

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/1260

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25641

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/04/skforum-xss-vuln.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19484

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/24430

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/24431

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/24432

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17389

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.vupen.com/english/advisories/2006/1260

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/25641

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.