CVE-2004-1716 Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the (1) IRC Server or (2) AIM ID fields in the user profile.
MediumCVSS 6.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the (1) IRC Server or (2) AIM ID fields in the user profile.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| powie pforum | = 1.24 | No fix listed |
| powie pforum | = 1.25 | No fix listed |
References
- 20040814 pscript.de PFORUM XSS Vulnerability mailing-list
- 12317 exploit patch third-party-advisory vendor-advisory
- VU#674542 exploit patch third-party-advisory us-government-resource
- 8985 vdb-entry vendor-advisory
- www.pscript.de
- 10954 exploit patch vdb-entry vendor-advisory
- pforum-irc-aim-xss(17003) vdb-entry