PT-2006-1235 · Foxrum · Foxrum

Aliaksandr Hartsuyeu · Published 2006-01-10 · Updated 2018-10-19 · CVE-2006-0156

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Foxrum version 4.0.4f

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary Javascript code via the javascript URI in bbcode url tags. The affected files are addpost1.php and addtopic1.php.

Recommendations For Foxrum version 4.0.4f, consider disabling the use of javascript URI in bbcode url tags in addpost1.php and addtopic1.php until a patch is available. Restrict access to these files to minimize the risk of exploitation. Avoid using the javascript URI scheme in bbcode url tags in the affected API endpoints until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2006-0156

Affected Products

Foxrum

References · 8

• 🔥 http://evuln.com/vulns/20 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0156 · Security Note
• http://secunia.com/advisories/18386 · Vendor Advisory
• http://securityreason.com/securityalert/325 · Note
• http://vupen.com/english/advisories/2006/0121 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24043 · Note
• http://securityfocus.com/bid/16172 · Note
• http://securityfocus.com/archive/1/421277/100/0/threaded · Note