CVE-2006-6089 Multiple cross-site scripting (XSS) vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject arbitrary web script or HTML via the (1) title (Subject), (2) groupname (Group Nam...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject arbitrary web script or HTML via the (1) title (Subject), (2) groupname (Group Name), or (3) detail (Message) field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| baalasp forum | All versions | No fix listed |
References
- s-a-p.ca url-repurposed vendor-advisory
- 22943 third-party-advisory vendor-advisory
- 1913 third-party-advisory
- 20061115 BaalAsp forum [login bypass ,injections sql(post), xss(post)] mailing-list
- 21111 vdb-entry
- ADV-2006-4579 vdb-entry
- baalasp-addpost1-xss(30344) vdb-entry