Vulnerability in Adalis D-Forum

CVE-2005-0660

Multiple cross-site scripting (XSS) vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3.

EPSS: 0.009 (57.2th percentile) — read the EPSS interpretation.

Affected products

Adalis D-forum — versions 1.11
N/a — versions n/a

References

cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)