CVE-2025-50938

Cross site scripting XSS vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php...

PT-2025-33746 · Hustoj · Hustoj

Name of the Vulnerable Software and Affected Versions: Hustoj version 2025-01-31 Description: The software contains a cross site scripting XSS issue in the thread.php file through the TID parameter. Recommendations: As a mitigation, sanitize the TID parameter in the thread.php file...

CVE-2025-50938

Cross site scripting XSS vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php...

PT-2005-4658 · Ovbb · Ovbb

Name of the Vulnerable Software and Affected Versions: OvBB version 0.08a Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the threadid parameter to "thread.php" and the userid parameter to "profile.php". The vendor has disputed these...