First published: Mon Jun 19 2006(Updated: )
Cross-site scripting (XSS) vulnerability in viewposts.cfm in aXentForum II and earlier allows remote attackers to inject arbitrary web script or HTML via the startrow parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Axent Axentforum | =i | |
Axent Axentforum | =ii |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-3080 is classified as a medium severity vulnerability due to potential cross-site scripting attacks.
To fix CVE-2006-3080, sanitize and validate the startrow parameter before processing in the application.
CVE-2006-3080 can enable attackers to perform cross-site scripting attacks, allowing them to inject malicious scripts into web pages.
CVE-2006-3080 affects aXentForum I and II versions.
Yes, CVE-2006-3080 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.