Vulnerability Details CVE-2006-1151
Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.067
EPSS Ranking 90.7%
CVSS Severity
CVSS v2 Score 5.0
References
- http://biyosecurity.be/bugs/mphorum.txt
- http://secunia.com/advisories/19121
- http://securityvulns.com/Ldocument750.html
- http://securityvulns.com/source13951.html
- http://www.osvdb.org/23951
- http://www.securityfocus.com/archive/1/427165/100/0/threaded
- http://www.securityfocus.com/archive/1/477253/100/0/threaded
- http://www.securityfocus.com/bid/25394
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25312
- http://biyosecurity.be/bugs/mphorum.txt
- http://secunia.com/advisories/19121
- http://securityvulns.com/Ldocument750.html
- http://securityvulns.com/source13951.html
- http://www.osvdb.org/23951
- http://www.securityfocus.com/archive/1/427165/100/0/threaded
- http://www.securityfocus.com/archive/1/477253/100/0/threaded
- http://www.securityfocus.com/bid/25394
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25312