CVE		CVE-2006-0958
Status		Candidate
Description		Cross-site scripting (XSS) vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) subject parameters.
Severity		Low
CVSS score		2,3
CVSS vector		(AV:R/AC:L/Au:NR/C:N/I:P/A:N/B:N)
Phase		Assigned (02.03.2006)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-0958
References		BID : 16877
		BUGTRAQ : 20060310 [eVuln] FreeForum PHP Code Execution & Multiple XSS Vulnerabilities
		CONFIRM : http://soft.zoneo.net/freeForum/changes.php
		FRSIRT : ADV-2006-0759
		MISC : http://evuln.com/vulns/89/summary.html
		SECUNIA : 19020
		XF : freeforum-func-xss(24925)