ZeroForum XSS vulnerability allowing remote execution of arbitrary Javascript via IMG tag
Reporter | Title | Published | Views | Family All 3 |
---|---|---|---|---|
![]() | ZeroForumๅพ่ฑกๆ ่ฎฐ่ทจ็ซ่ๆฌๆง่กๆผๆด | 5 Sep 200900:00 | โ | seebug |
![]() | CVE-2002-0474 | 12 Aug 200204:00 | โ | nvd |
![]() | CVE-2002-0474 | 11 Jun 200204:00 | โ | cvelist |
Source | Link |
---|---|
securityfocus | www.securityfocus.com/archive/1/264897 |
securityfocus | www.securityfocus.com/bid/4394 |
iss | www.iss.net/security_center/static/8702.php |
Parameter | Position | Path | Description | CWE |
---|---|---|---|---|
img | request body | /forum/post | ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within IMG image tag. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contactย us for a demo andย discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo