CVE-2001-0970

HIGH 7.5CVE-2001-0970 · Published 31/08/2001 · updated 16/06/2026

In short

CVE-2001-0970 is a HIGH (CVSS 7.5) vulnerability affecting td forum (tdavid).
Chance of exploitation in the next 30 days (EPSS): 3.4%, higher than 88.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
td forum tdavid	`= 1.2`	No fix yet

Description

Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitrary script on other clients via a forum message that contains the script.

References

archives.neohapsis.com/archives/bugtraq/2001-08/0281.html
marc.info
kb.cert.org/vuls/id/782243 · Third Party Advisory
securityfocus.com/bid/3207
exchange.xforce.ibmcloud.com/vulnerabilities/7009

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free