CVE-2005-1285 Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the hilight parameter.
MediumCVSS 6.8
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the hilight parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| woltlab burning board | <= 2.3.1 | No fix listed |
References
- 20050422 [SePro Bugtraq] WBB - WoltLab Burning Board <= 2.3.1 - XSS mailing-list
- 15058 third-party-advisory
- 1013790 exploit vdb-entry
- 13325 vdb-entry