XMB Forum 1.8 BBcode align Tag XSS

2004-02-23T00:00:00
ID EDB-ID:23747
Type exploitdb
Reporter Janek Vind
Modified 2004-02-23T00:00:00

Description

XMB Forum 1.8 BBcode align Tag XSS. CVE-2004-0322. Webapps exploit for php platform

                                        
                                            source: http://www.securityfocus.com/bid/9726/info
 
XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user or to have malicious SQL queries executed in the underlying database.

text1 [align=center onmouseover=alert(document.cookie);] text2 [/align]