EUVD-2002-0471

Malware in sbrugna...

ZeroForum图象标记跨站脚本执行漏洞

BugCVE: CVE-2002-0474 BUGTRAQ: 4394 ZeroForum是一款基于WEB的论坛程序，运行在多种Unix和Linux系统下，也可运行于Windows平台下，由PHP实现并可用多种数据库平台支持。 ZeroForum对用户输入过滤上存在漏洞，可使远程攻击者利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。...

CVE-2002-0474

Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within IMG image tag...

CVE-2002-0474

Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within IMG image tag...

CVE-2002-0474

ZeroForum 1.0 contains a Cross-site scripting (XSS) flaw that allows remote attackers to execute arbitrary JavaScript in a victim’s browser by embedding code in the IMG tag within posts. Root cause: inadequate filtering of content inside image tags, enabling script execution when other users view...