CVE-2006-0124

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://evuln.com/vulns/15/summary.htmlExploit, Vendor Advisory
http://secunia.com/advisories/18300Vendor Advisory
http://securitytracker.com/id?1015445
http://www.osvdb.org/22242
http://www.securityfocus.com/archive/1/420990/100/0/threaded
http://www.securityfocus.com/bid/16157Exploit
http://www.vupen.com/english/advisories/2006/0077
http://evuln.com/vulns/15/summary.htmlExploit, Vendor Advisory
http://secunia.com/advisories/18300Vendor Advisory
http://securitytracker.com/id?1015445
http://www.osvdb.org/22242
http://www.securityfocus.com/archive/1/420990/100/0/threaded
http://www.securityfocus.com/bid/16157Exploit
http://www.vupen.com/english/advisories/2006/0077

Timeline

Published: Jan 9, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-01255.0Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appserv_root param CVE-2006-01264.6rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maint CVE-2006-01274.0Directory traversal vulnerability in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote authenticated users to rename the CVE-2006-012810.0Buffer overflow in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote attackers to have an unknown impact via unknown atta CVE-2006-01295.0Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier generates different responses dependin CVE-2006-01307.5Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt aut CVE-2006-01315.0boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php and (2) side_menu.php, which CVE-2006-01325.0Directory traversal vulnerability in webftp.php in SysCP WebFTP 1.2.6 and possibly earlier allows remote attackers to include and execute ar CVE-2006-01333.6Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents CVE-2006-01344.3Cross-site scripting (XSS) vulnerability in register.php in TheWebForum (twf) 1.2.1 allows remote attackers to inject arbitrary web script o CVE-2006-01357.5SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass log CVE-2006-01364.3Multiple cross-site scripting (XSS) vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimera Web Portal System 0