CVE-2006-3245

Published: Jun 27, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) member and (2) activatecode parameters.

Affected (9)

Products: Mvnforum: Mvnforum

Mvnforum

1 product

Mvnforum

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Mvnforum Mvnforum	Version 1.0.0_beta1
Mvnforum Mvnforum	Version 1.0.0_beta2
Mvnforum Mvnforum	Version 1.0.0_beta3
Mvnforum Mvnforum	Version 1.0.0_rc1
Mvnforum Mvnforum	Version 1.0.0_rc2
Mvnforum Mvnforum	Version 1.0.0_rc3_01
Mvnforum Mvnforum	Version 1.0.0_rc4
Mvnforum Mvnforum	Version 1.0.0_rc4_04
Mvnforum Mvnforum	Version 1.0_ga