CVE-2006-0974 - Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script or HTML via the err_txt parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script or HTML via the err_txt parameter

Published Mar 3, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.91%

Description

Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script or HTML via the err_txt parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://archives.neohapsis.com/archives/bugtraq/2006-02/0548.html
mailing-listx_refsource_BUGTRAQExploit
http://secunia.com/advisories/19043
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/23540
vdb-entryx_refsource_OSVDBExploit
http://www.securityfocus.com/bid/16821
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/0776
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/24981
vdb-entryx_refsource_XF

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2006-02/0548.html		mailing-listx_refsource_BUGTRAQExploit
http://secunia.com/advisories/19043		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/23540		vdb-entryx_refsource_OSVDBExploit
http://www.securityfocus.com/bid/16821		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/0776		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/24981		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 3, 2006

Updated Aug 7, 2024

Reserved Mar 3, 2006

Link CVE-2006-0974

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-0974

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-0974