CVE-2006-1661

Description

Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) areaID parameter in area.View.action, (2) time parameter in planning.View.action, and (3) userID parameter in user.View.action.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25641

http://www.vupen.com/english/advisories/2006/1260

http://www.osvdb.org/24432

http://www.osvdb.org/24431

http://www.osvdb.org/24430

http://secunia.com/advisories/19484

http://pridels0.blogspot.com/2006/04/skforum-xss-vuln.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS