Published: 07/04/2006 Updated: 20/07/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 695

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) areaID parameter in area.View.action, (2) time parameter in planning.View.action, and (3) userID parameter in user.View.action.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sk soft skforum

source: wwwsecurityfocuscom/bid/17389/info SKForum is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the contex ...

source: wwwsecurityfocuscom/bid/17389/info SKForum is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context ...

source: wwwsecurityfocuscom/bid/17389/info SKForum is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of ...

NVD-CWE-Other http://www.securityfocus.com/bid/17389 http://www.osvdb.org/24430 http://www.osvdb.org/24431 http://www.osvdb.org/24432 http://secunia.com/advisories/19484 http://pridels0.blogspot.com/2006/04/skforum-xss-vuln.html http://www.vupen.com/english/advisories/2006/1260 https://exchange.xforce.ibmcloud.com/vulnerabilities/25641 https://nvd.nist.gov https://www.exploit-db.com/exploits/27573/

CVE-2006-1661

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect