CVE-2006-0877 - Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable

MEDIUM

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable

Published Feb 24, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 3.07%

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://evuln.com/vulns/85/summary.html		x_refsource_MISCVendor Advisory
http://hot-things.net/forum/show.php?f=2&topic=20060224080919		x_refsource_CONFIRM
http://secunia.com/advisories/18996		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/23430		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/426760/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16958		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0706		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0881		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24831		vdb-entryx_refsource_XF