PRIOn knowledge basePRION:CVE-2006-0896

HistoryFeb 25, 2006 - 11:02 a.m.

Cross site scripting

2006-02-2511:02:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.6%

JSON

Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field.

CPENameOperatorVersion
simple_machines_forumeq1.0.6

CPE	Name	Operator	Version
	simple_machines_forum	eq	1.0.6

References

attrition.org/pipermail/vim/2006-April/000682.html

evuln.com/vulns/86/summary.html

secunia.com/advisories/19004

securityreason.com/securityalert/545

www.osvdb.org/23480

www.securityfocus.com/archive/1/426824/100/0/threaded

www.securityfocus.com/bid/16841

www.simplemachines.org/community/index.php?topic=78841.0

www.vupen.com/english/advisories/2006/0726

exchange.xforce.ibmcloud.com/vulnerabilities/24915