CVE-2007-0398

Multiple cross-site scripting XSS vulnerabilities in forum.php3 in Arnaud Guyonne aka Arnotic a-forum allow remote attackers to inject arbitrary web script or HTML via the 1 Sujet or 2 Pseudo field...

CVE-2007-0398

CVE-2007-0398 describes multiple cross-site scripting (XSS) vulnerabilities in the forum.php3 component of Arnaud Guyonne’s a-forum. The flaws allow remote attackers to inject arbitrary web script or HTML through the (1) Sujet and (2) Pseudo input fields. The issue affects the affected forum’s in...

a-forum xss

a-forum xss By : sn0oPy Risk : medium Site : http://www.mistersp.com/ Dork : inurl:"/a-forum/forum.php3" exploit : just inject any script on the "sujet" or/and "psuedo". contact : [email protected] greetz : subzero, Avg Teamhttp://forums.avenir-geopolitique.net...