Unscored CVE-2006-5504 EUVD-2006-5489GHSA-7cgr-mhm8-53pw

Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote attackers to inject arbitrary web script…

Published Oct 25, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote attackers to inject arbitrary web script or HTML via a base64 encoded params value in the action parameter.

References

20061020 Simple Machines Forum (SMF) XSS issue mailing-list
31070 vdb-entry
20061021 Re: Simple Machines Forum (SMF) XSS issue mailing-list
20061022 Re: Simple Machines Forum (SMF) XSS issue mailing-list
smf-base64-xss(29689) vdb-entry