CVE-2006-1665: Arab Portal

Low severity, CVSS 2.6. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the (1) adminJump and (2) forum_middle parameters in (a) forum.php, and the (3) form parameter in (b) members.php, (c) pm.php, and (d) mail.php.

Affected products

• Arab Portal Arab Portal: version 2.0.1_stable only

Published 2006-04-07. Last modified 2026-06-16.