CVE-2006-5504
published 2006-10-25CVE-2006-5504: Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote attackers to inject arbitrary web script or HTML via a…
PriorityP413medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.12%
62.1th percentile
Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote attackers to inject arbitrary web script or HTML via a base64 encoded params value in the action parameter.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| simple_machines | simple_machines_forum | — | — |
| simple_machines | simple_machines_forum | — | — |
| simple_machines | simple_machines_forum | — | — |
| simple_machines | simple_machines_forum | — | — |
| simple_machines | simple_machines_forum | — | — |
| simple_machines | simple_machines_forum | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/31070http://www.securityfocus.com/archive/1/449307/100/0/threadedhttp://www.securityfocus.com/archive/1/449395/100/0/threadedhttp://www.securityfocus.com/archive/1/449478/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/29689http://osvdb.org/31070http://www.securityfocus.com/archive/1/449307/100/0/threadedhttp://www.securityfocus.com/archive/1/449395/100/0/threadedhttp://www.securityfocus.com/archive/1/449478/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/29689
2006-10-25
Published