4.3
CVSSv2

CVE-2002-1829

Published: 31/12/2002 Updated: 11/07/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote malicious users to inject arbitrary web script or HTML via (1) myhome.php, (2) an onerror attribute in an IMG tag (a variant of CVE-2002-0330), or (3) a glow tag.

Vulnerable Product Search on Vulmon Subscribe to Product

openbb openbb 1.0.0_rc3

Exploits

source: wwwsecurityfocuscom/bid/4819/info OpenBB is web forum software written in PHP It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems OpenBB is reportedly vulnerable to HTML injection attacks The vulnerability occurs when HTML code is replaced with BBCodes OpenBB uses 'BBCodes' in the ...