Cross site scripting

2008-03-2422:44:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in busca.php in eForum 0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) busca and (2) link parameters.

CPENameOperatorVersion
eforumeq0.4

CPE	Name	Operator	Version
	eforum	eq	0.4

References

omni.playhack.net/blog/?p=10

secunia.com/advisories/29380

securityreason.com/securityalert/3767

www.securityfocus.com/archive/1/489738/100/0/threaded

www.securityfocus.com/bid/28293