Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 03/03/2015 Updated: 04/03/2015

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in edit_prefs.php in Beehive Forum 1.4.4 allow remote malicious users to inject arbitrary web script or HTML via the (1) homepage_url, (2) pic_url, or (3) avatar_url parameter, which are not properly handled in an error message.

Vulnerable Product	Search on Vulmon	Subscribe to Product
beehive forum beehive forum 1.4.4

Document Title: ============ Beehive Forum v144 Stored XSS Vulnerability Author: ============== Halil Dalabasmaz Release Date: =========== 23 Feb 2015 Product & Service Introduction: ======================== Beehive is an open-source project for creating a high-configurable frame-based discussion forum Vendor Homepage: ================= ...

CWE-79 http://www.exploit-db.com/exploits/36154 http://sourceforge.net/p/beehiveforum/news/2015/02/beehive-forum-145-released/https://nvd.nist.gov https://www.exploit-db.com/exploits/36154/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-2198

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect