CVE-2008-6431 Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) outpused parameter to index.php, the (2) footer_copyright a...
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) outpused parameter to index.php, the (2) footer_copyright and (3) verandproname parameters to newtem/footer/bsd01footer.php, and the (4) topads and (5) myplugin parameters to newtem/header/bsd01header.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bmforum | = 5.6 | No fix listed |
References
- 45612 vdb-entry
- 45613 vdb-entry
- 45614 vdb-entry
- 30369 third-party-advisory vendor-advisory
- 20080522 BMForum Remote 5.6 Miltiple XSS Vulnerability mailing-list
- 29339 exploit vdb-entry
- bmforum-index-xss(42590) vdb-entry