CVE-2006-5060

2006-09-2800:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.047 Low

EPSS

Percentile

92.7%

JSON

Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot parameter in the forgot mode.

References

secunia.com/advisories/22077

securityreason.com/securityalert/1649

www.securityfocus.com/archive/1/446879/100/0/threaded

www.securityfocus.com/bid/20162

www.vupen.com/english/advisories/2006/3766

exchange.xforce.ibmcloud.com/vulnerabilities/29131