CVE-2008-6437

Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to error.php, and the (2) nickname and (3) randomid parameters to part/menu.php.
Configurations

Configuration 1 (hide)

cpe:2.3:a:lukas_waldauf:phpfreeforum:*:rc2:*:*:*:*:*:*

History

21 Nov 2024, 00:56

Type Values Removed Values Added
References () http://osvdb.org/45607 - () http://osvdb.org/45607 -
References () http://osvdb.org/45608 - () http://osvdb.org/45608 -
References () http://secunia.com/advisories/30372 - Vendor Advisory () http://secunia.com/advisories/30372 - Vendor Advisory
References () http://www.securityfocus.com/archive/1/492445/100/0/threaded - () http://www.securityfocus.com/archive/1/492445/100/0/threaded -
References () http://www.securityfocus.com/bid/29337 - Exploit () http://www.securityfocus.com/bid/29337 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/42586 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/42586 -

Information

Published : 2009-03-06 18:30

Updated : 2024-11-21 00:56


NVD link : CVE-2008-6437

Mitre link : CVE-2008-6437

CVE.ORG link : CVE-2008-6437


JSON object : View

Products Affected

lukas_waldauf

  • phpfreeforum
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')