3 matches found
CVE-2010-4811
Multiple cross-site scripting XSS vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the 1 usermsn, 2 useremail, and 3 userphone parameters in a modifyDetails action...
PT-2011-1757
Name of the Vulnerable Software and Affected Versions 6kbbs version 8.0 build 20100901 Description The issue allows remote attackers to inject arbitrary web script or HTML via the usermsn, useremail, and userphone parameters in a modifyDetails action, potentially leading to cross-site scripting X...
CVE-2010-4811: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the 1 usermsn, 2 useremail, and 3 userphone parameters in a modifyDetails action...