Published: 06/03/2009 Updated: 11/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 445

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote malicious users to inject arbitrary web script or HTML via the (1) outpused parameter to index.php, the (2) footer_copyright and (3) verandproname parameters to newtem/footer/bsd01footer.php, and the (4) topads and (5) myplugin parameters to newtem/header/bsd01header.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
bmforum bmforum 5.6

source: wwwsecurityfocuscom/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow th ...

source: wwwsecurityfocuscom/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow the at ...

source: wwwsecurityfocuscom/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow the ...

CWE-79 http://www.securityfocus.com/bid/29339 http://secunia.com/advisories/30369 http://osvdb.org/45614 http://osvdb.org/45613 http://osvdb.org/45612 https://exchange.xforce.ibmcloud.com/vulnerabilities/42590 http://www.securityfocus.com/archive/1/492449/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/31827/

CVE-2008-6431

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect