Beveiligingsadvies

CVE-2008-0757

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2008-02-13 20:00:00

Laatst bijgewerkt 2024-08-07 07:54:23

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Cross-site scripting (XSS) vulnerability in index.php in MercuryBoard 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter (aka the message text area), which leads to an injection in the messenger during private message (PM) preview. NOTE: some of these details are obtained from third party information.

← Alle CVE's bekijken Bekijk op cve.org ↗