6.8
CVSSv2

CVE-2004-0319

Published: 23/11/2004 Updated: 11/07/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote malicious users to execute arbitrary script as other users, as demonstrated using the background:url in a (1) font color or (2) font face argument.

Vulnerable Product Search on Vulmon Subscribe to Product

ezboard ezboard 7.3u

Exploits

source: wwwsecurityfocuscom/bid/9725/info ezboard is prone to an HTML injection vulnerability An attacker may exploit this issue by including hostile HTML and script code encapsulated in [font] tags of posts to the bulletin board This code may be rendered in the web browser of a user who views these areas of the site This would occur i ...