CVE-2006-2696 - Cross-site scripting (XSS) vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) startletter parameter in userview.asp and the (2) catid parameter in topics.asp

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) startletter parameter in userview.asp and the (2) catid parameter in topics.asp

Published May 31, 2006

6.8

MEDIUM

CVSS 2.0

EPSS 1.82%

Description

Cross-site scripting (XSS) vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) startletter parameter in userview.asp and the (2) catid parameter in topics.asp.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://securityreason.com/securityalert/997
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/435140/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2695
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26803
vdb-entryx_refsource_XF

Link	Providers	Tags
http://securityreason.com/securityalert/997		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/435140/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2695		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26803		vdb-entryx_refsource_XF