CVE-2008-5172

CVE-2008-5172 describes multiple cross-site scripting (XSS) vulnerabilities in Yazd Forum Software 3.x . The affected components are the web pages and parameters: (1) the query parameter q to search.jsp , and (2) the message parameter msg to error.jsp and userAccount.jsp . The root cause is an in...

CVE-2008-5172: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Yazd Forum Software 3.x allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to a search.jsp, and the 2 msg parameter to b error.jsp and c userAccount.jsp. NOTE: the provenance of this information is unknown; the...