Cross site scripting in Onecenter forum 4.0

Issue : cross site scripting in Onecenter forum Affected Product : Onecenter forum 4.0 Description : Onecenter offers a free discussion forum hosted in the company's servers forum.onecenter.com . Any user in the forum is identified by a cookie that contains nick , name , mail address and password...

Onecenter Forum 4.0 - IMG Tag Script Injection

source: https://www.securityfocus.com/bid/7441/info OneCenter ForumOne 4.0 is a full-featured, web-based group discussion forum. A problem with Onecenter ForumOne could allow remote users to execute arbitrary code in the context of the web site hosting ForumOne. The problem occurs due to the lack...

Onecenter Forum 4.0 - IMG Tag Script Injection

Onecenter Forum 4.0 - IMG Tag Script Injection source: https://www.securityfocus.com/bid/7441/info OneCenter ForumOne 4.0 is a full-featured, web-based group discussion forum. A problem with Onecenter ForumOne could allow remote users to execute arbitrary code in the context of the web site hosti...