CVE-2006-3245

Description

Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) member and (2) activatecode parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27370

http://www.vupen.com/english/advisories/2006/2531

http://www.securityfocus.com/bid/18663

http://secunia.com/advisories/20803

http://pridels0.blogspot.com/2006/06/mvnforum-xss-vuln.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3