CVE-2005-4311: Dcscripts Dcforum

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via (1) the page parameter in dcboard.php and (2) unspecified search parameters.

Affected products

• Dcscripts Dcforum: version 2k_1.1 only; version 5.11 only; version 6.0 only; version 6.1 only; version 6.2 only; version 6.21 only; …
• Dcscripts Dcforum+: version 1.0 only; version 1.1 only; version 1.001 only; version 1.002 only; version 1.2 only; version 1.003 only

Published 2005-12-17. Last modified 2026-06-16.