Cross site scripting

2010-04-0918:30:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.1%

JSON

Cross-site scripting (XSS) vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to inject arbitrary web script or HTML via the userid parameter in a modboard action, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
teamsite_hack_pluginle3.0

CPE	Name	Operator	Version
	teamsite_hack_plugin	le	3.0

References

secunia.com/advisories/39009