Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 04/10/2002 Updated: 05/09/2008

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote malicious users to execute arbitrary script as other users via an [img] tag with a closing quote followed by the script.

Vulnerable Product	Search on Vulmon	Subscribe to Product
splatt splatt forum 3.0

source: wwwsecurityfocuscom/bid/4953/info Splatt Forum does not filter HTML from image tags This may allow an attacker to inject arbitrary script code in forum messages Injected script code will be executed in the browser of an arbitrary web user who views the malicious forum message, in the context of the website running Splatt Forum ...

NVD-CWE-Other http://www.iss.net/security_center/static/9279.php http://www.securityfocus.com/bid/4953 http://online.securityfocus.com/archive/1/275744 http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0091.html https://nvd.nist.gov https://www.exploit-db.com/exploits/21514/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-0959

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect