CVE-2008-0775 Cross-site scripting (XSS) vulnerability in sboxDB.php in Simple Machines Forum (SMF) Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shou...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in sboxDB.php in Simple Machines Forum (SMF) Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&#", contain the desired script, and end with ";".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simple machines smf shoutbox | = 1.14 | No fix listed |
| simple machines smf shoutbox | = 1.15 | No fix listed |
| simple machines smf shoutbox | = 1.16b | No fix listed |
References
- 28900 third-party-advisory
- 3651 third-party-advisory
- 20080210 Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS mailing-list
- 20080321 Re: Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS mailing-list
- 20080422 Re: Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS mailing-list
- 27727 vdb-entry