PT-2006-1235 · Foxrum · Foxrum

Aliaksandr Hartsuyeu · Publicado 2006-01-10 · Atualizado 2018-10-19 · CVE-2006-0156

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Foxrum version 4.0.4f

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary Javascript code via the javascript URI in bbcode url tags. The affected files are addpost1.php and addtopic1.php.

Recommendations For Foxrum version 4.0.4f, consider disabling the use of javascript URI in bbcode url tags in addpost1.php and addtopic1.php until a patch is available. Restrict access to these files to minimize the risk of exploitation. Avoid using the javascript URI scheme in bbcode url tags in the affected API endpoints until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-0156

Produtos afetados

Foxrum

Referências · 8

• 🔥 http://evuln.com/vulns/20 · Exploit
• http://securityreason.com/securityalert/325 · Nota
• http://vupen.com/english/advisories/2006/0121 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0156 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24043 · Nota
• http://secunia.com/advisories/18386 · Aviso do Fabricante
• http://securityfocus.com/bid/16172 · Nota
• http://securityfocus.com/archive/1/421277/100/0/threaded · Nota