Cross site scripting

2012-09-0621:55:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%

JSON

Cross-site scripting (XSS) vulnerability in the file_download function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename parameter.

CPENameOperatorVersion
gnuboardle4.34

CPE	Name	Operator	Version
	gnuboard	le	4.34

References

secunia.com/advisories/48458

sir.co.kr/bbs/board.php?bo_table=g4_pds&wr_id=7156

www.securityfocus.com/bid/52622

www.exploit-db.com/exploits/18627