CVE-2006-5129

no score yetEPSS 1.3%

salims softhouse jaf cms: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) the message parameter, and possibly other parameters, in module/shout/jafshout.php (aka the shoutbox); and (2) the message body in a forum post in module/forum/topicwin.php, related to the name, email, title, date, ldate, and lname variables.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
Published: 2006-10-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

salims_softhouse:jaf_cms

References

http://secunia.com/advisories/22143
http://securityreason.com/securityalert/1674
http://www.securityfocus.com/archive/1/447081/100/0/threaded
http://www.securityfocus.com/bid/20225
http://secunia.com/advisories/22143

Check your stack JSON