CVE-2006-5504

Published: Oct 25, 2006Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote attackers to inject arbitrary web script or HTML via a base64 encoded params value in the action parameter.

Affected (6)

Products: Simple Machines: Simple Machines Forum

Simple Machines

1 product

Simple Machines Forum

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Simple Machines Simple Machines Forum	Version 1.0.5
Simple Machines Simple Machines Forum	Version 1.0.6
Simple Machines Simple Machines Forum	Version 1.0.7
Simple Machines Simple Machines Forum	Version 1.1_rc1
Simple Machines Simple Machines Forum	Version 1.1_rc2
Simple Machines Simple Machines Forum	Version 1.1_rc3