Cross site scripting

2010-01-0417:30:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.079 Low

EPSS

Percentile

94.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the (1) category_id parameter to forums.php, or the forum_id parameter to (2) forum.php or (3) forum_topic_new.php.

CPENameOperatorVersion
viart_cmseq3.3.2

CPE	Name	Operator	Version
	viart_cms	eq	3.3.2

References

osvdb.org/56883

osvdb.org/56884

osvdb.org/56885

packetstormsecurity.org/0908-exploits/viartcms-xss.txt

secunia.com/advisories/36241

www.securityfocus.com/bid/36003

exchange.xforce.ibmcloud.com/vulnerabilities/52371