Unrated severityNVD Advisory· Published Feb 25, 2006· Updated Jun 16, 2026
CVE-2006-0896
CVE-2006-0896
Description
Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:simple_machines:simple_machines_forum:1.0.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:simple_machines:simple_machines_forum:1.0.6:*:*:*:*:*:*:*
- (no CPE)range: =1.0.6
Patches
Vulnerability mechanics
References
10- evuln.com/vulns/86/summary.htmlnvdVendor Advisory
- secunia.com/advisories/19004nvdVendor Advisory
- securityreason.com/securityalert/545nvdVendor Advisory
- www.vupen.com/english/advisories/2006/0726nvdVendor Advisory
- attrition.org/pipermail/vim/2006-April/000682.htmlnvd
- www.osvdb.org/23480nvd
- www.securityfocus.com/archive/1/426824/100/0/threadednvd
- www.securityfocus.com/bid/16841nvd
- www.simplemachines.org/community/index.phpnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/24915nvd
News mentions
0No linked articles in our index yet.