← Database

CVE-2006-5503

MEDIUM CVSS: 4.3 Published: 2006-10-25 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2 allows remote attackers to inject arbitrary web script or HTML via the action parameter.

Affected Platforms

Simple Machines Simple Machines Forum

Weakness Type

NVD-CWE-Other

References