CVE-2008-0284 Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) Itemid or (2) topic arguments.
MediumCVSS 4.3
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) Itemid or (2) topic arguments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simple machines smf | <= 1.1.4 | No fix listed |
References
- 3540 third-party-advisory
- 20080110 Simple Machines Forum Cross-Site Scripting Vulnerabilities mailing-list
- 27218 vdb-entry
- simplemachinesforum-itemid-xss(39585) vdb-entry