medium4.3Public exploit code
CVE-2006-0110
Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Foro Domus 2.10 - Multiple Input Validation Vulnerabilities2006-01-06 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Javier Suarez Sanz | Foro Domus | Version 2.10 |
References
- NVD record
- CVE.org record
- http://evuln.com/vulns/16/summary.html
- http://secunia.com/advisories/18327
- http://www.osvdb.org/22263
- http://www.securityfocus.com/archive/1/421056/100/0/threaded
- http://www.securityfocus.com/bid/16154
- http://www.vupen.com/english/advisories/2006/0073
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24020
- http://evuln.com/vulns/16/summary.html
- http://secunia.com/advisories/18327
- http://www.osvdb.org/22263
- http://www.securityfocus.com/archive/1/421056/100/0/threaded
- http://www.securityfocus.com/bid/16154
- http://www.vupen.com/english/advisories/2006/0073
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24020