Cross site scripting

2007-10-1820:17:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in NSSboard (formerly Simple PHP Forum) 6.1 allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags when BBcode is disabled; or the (2) user, (3) email, or (4) Real Name fields in a profile.

CPENameOperatorVersion
simple_php_forumeq0.6.1

CPE	Name	Operator	Version
	simple_php_forum	eq	0.6.1

References

securityreason.com/securityalert/3246

www.securityfocus.com/archive/1/482312/100/0/threaded

www.securityfocus.com/bid/26081

exchange.xforce.ibmcloud.com/vulnerabilities/37218