3 matches found
CVE-2009-4649
Multiple cross-site scripting XSS vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the postatoda parameter to 1 rispondi.php and 2 scrivi.php, which is not properly handled in forum.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the postatoda parameter to 1 rispondi.php and 2 scrivi.php, which is not properly handled in forum.php...
CVE-2009-4649
GeccBBlite 0.1 is affected by multiple Cross-Site Scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via the postatoda parameter to rispondi.php and scrivi.php, with improper handling in forum.php. The NVD/NVD-derived entry lists a CVSS v2 ba...