Security Advisory

CVE-2010-4811

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-07-08 22:00:00

Last updated 2024-08-07 04:02:29

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the (1) user[msn], (2) user[email], and (3) user[phone] parameters in a modifyDetails action.

← Browse all CVEs View on cve.org ↗