CVE-2001-0970

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-08-31 · updated 2026-06-16

Description

Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitrary script on other clients via a forum message that contains the script.

Affected products

Tdavid Td Forum: 1.2

References

http://archives.neohapsis.com/archives/bugtraq/2001-08/0281.html
http://marc.info/?l=bugtraq&m=99832137410609&w=2
http://www.kb.cert.org/vuls/id/782243
http://www.securityfocus.com/bid/3207
https://exchange.xforce.ibmcloud.com/vulnerabilities/7009
http://archives.neohapsis.com/archives/bugtraq/2001-08/0281.html
http://marc.info/?l=bugtraq&m=99832137410609&w=2
http://www.kb.cert.org/vuls/id/782243
http://www.securityfocus.com/bid/3207
https://exchange.xforce.ibmcloud.com/vulnerabilities/7009

Get alerted when CVE-2001-0970 or the next vulnerability affects your stack