3 matches found
BBSXP 5.13 'error.asp' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33411/info BBSXP is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
CVE-2009-0285
Cross-site scripting XSS vulnerability in error.asp in BBSXP 5.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter...
CVE-2009-0285
CVE-2009-0285 describes a cross-site scripting (XSS) vulnerability in the error.asp page of BBSXP 5.13 and earlier . The weakness is exploitable via the message parameter , enabling remote attackers to inject arbitrary web script or HTML. The provided documents confirm the vulnerability and affec...