Unscored severity · published Sep 28, 2006
CVE-2006-5060
Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot parameter in the forgot mode.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JA
Jamroom · Jamroom
3.0.16 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5060
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5060
Vendor Advisory
http://secunia.com/advisories/22077
securityreason.com
http://securityreason.com/securityalert/1649
www.securityfocus.com
http://www.securityfocus.com/archive/1/446879/100/0/threaded
Exploit
http://www.securityfocus.com/bid/20162
www.vupen.com
http://www.vupen.com/english/advisories/2006/3766
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29131
More from Jamroom
6.1
CVE-2012-6705
Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field
–
CVE-2010-2463
Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the post_id parameter in a modify…
–
CVE-2009-1318
Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary…
–
CVE-2008-3376
Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors
–
CVE-2008-3375
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value…