CVE-2007-5564 Multiple cross-site scripting (XSS) vulnerabilities in NSSboard (formerly Simple PHP Forum) 6.1 allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags when BBcode is disabled;...
LowCVSS 2.6
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in NSSboard (formerly Simple PHP Forum) 6.1 allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags when BBcode is disabled; or the (2) user, (3) email, or (4) Real Name fields in a profile.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simple php forum | = 0.6.1 | No fix listed |
References
- 3246 third-party-advisory
- 20071014 HTML Injection Vuln in nssboard mailing-list
- 26081 vdb-entry
- nssboard-profile-xss(37218) vdb-entry