CVE-2006-1157

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-12 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Subject field (possibly messaggio parameter) when posting a new message in post.php.

Affected products

Adp Forum: all versions

References

http://biyosecurity.be/bugs/adpforum2.txt
http://www.osvdb.org/23961
http://www.securityfocus.com/archive/1/427171/100/0/threaded
http://www.securityfocus.com/bid/17047
http://www.vupen.com/english/advisories/2006/0901
https://exchange.xforce.ibmcloud.com/vulnerabilities/25189
http://biyosecurity.be/bugs/adpforum2.txt
http://www.osvdb.org/23961
http://www.securityfocus.com/archive/1/427171/100/0/threaded
http://www.securityfocus.com/bid/17047
http://www.vupen.com/english/advisories/2006/0901
https://exchange.xforce.ibmcloud.com/vulnerabilities/25189

Get alerted when CVE-2006-1157 or the next vulnerability affects your stack