CodoForum 3.4 - Persistent Cross-Site Scripting

CodoForum 3.4 - Persistent Cross-Site Scripting Exploit Title: Codoforum v3.4 Stored Cross-Site Scripting Stored XSS Google Dork: intext:"powered by codoforum" Date: 01/06/2016 Exploit Author: Ahmed Sherif OffensiveBits Vendor Homepage: http://codologic.com/page/ Software Link:...

CodoForum 3.4 Cross Site Scripting Vulnerability

CodoForum version 3.4 suffers from a cross site scripting vulnerability. CodoForum 3.4 Cross Site Scripting Vulnerability 1. Introduction Affected Product: CodoForum 3.4 Fixed in: not fixed Release mode: Full Disclosure CVE: Requested, but not assigned Credits Tim Coen of Curesec GmbH 2...

CodoForum 3.4 Cross Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: CodoForum 3.4 Fixed in: not fixed Fixed Version Link: n/a Vendor Contact: [email protected] Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 09/01/2015 Disclosed to public: 12/02/2015 Release mode: Fu...