Unrated severityNVD Advisory· Published Jan 9, 2006· Updated Apr 16, 2026

CVE-2006-0124

Description

Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field.

Affected products

Adn Forum/Adn Forum2 versions
cpe:2.3:a:adn_forum:adn_forum:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:adn_forum:adn_forum:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:adn_forum:adn_forum:1.0b:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

evuln.com/vulns/15/summary.htmlnvdExploitVendor Advisory
www.securityfocus.com/bid/16157nvdExploit
secunia.com/advisories/18300nvdVendor Advisory
securitytracker.com/idnvd
www.osvdb.org/22242nvd
www.securityfocus.com/archive/1/420990/100/0/threadednvd
www.vupen.com/english/advisories/2006/0077nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000