5 matches found
PT-2017-16663
Name of the Vulnerable Software and Affected Versions Kunena extension versions 5.0.2 through 5.0.4 Description The issue allows for the execution of JavaScript in the forum message subject, leading to a cross-site scripting XSS issue. This is due to the acceptance of JavaScript in the topic...
Cross site scripting
Cross-site scripting XSS vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via a topic subject...
CVE-2008-5435
Cross-site scripting XSS vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via a topic subject...
CVE-2008-5435: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via a topic subject...
BtitTracker 1.4 XSS
BtitTracker 1.4 xss Some fields are not sanitized for bad chars or words like javascript. =email field= When new user is registered you can put whatever you want and after that when still in mode "validating" you can change your email to something like "plaintext the field is 30 chars long so it ...