PT-2006-5868 · Ph03Y3Nk · Ph03Y3Nk Just Another Flat File (Jaf) Cms
Published
2006-10-02
·
Updated
2008-09-05
·
CVE-2006-5130
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
ph03y3nk just another flat file (JAF) CMS version 4.0 RC1
Description
The issue allows remote attackers to inject arbitrary web script or HTML via the
name, url, title, and about parameters in a forum post, potentially leading to cross-site scripting (XSS) attacks.Recommendations
For ph03y3nk just another flat file (JAF) CMS version 4.0 RC1, consider restricting input for the
name, url, title, and about parameters in forum posts to prevent arbitrary web script or HTML injection until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ph03Y3Nk Just Another Flat File (Jaf) Cms