medium6.8Public exploit code
CVE-2006-2696
Cross-site scripting (XSS) vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) startletter par…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Easy-Content Forums 1.0 - Multiple SQL Injection / Cross-Site Scripting Vulnerabilities2006-05-26 · webapps · asp · Verified
Impact
Cross-site scripting (XSS) vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) startletter parameter in userview.asp and the (2) catid parameter in topics.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easy-Content Forums | Easy-Content Forums | Version 1.0 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/997
- http://www.securityfocus.com/archive/1/435140/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26803
- http://securityreason.com/securityalert/997
- http://www.securityfocus.com/archive/1/435140/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26803