CVEvulnerability
CVE-2004-1716
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-08-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the (1) IRC Server or (2) AIM ID fields in the user profile.
Affected configurations
• powie pforum 1.24
• powie pforum 1.25
References
- http://marc.info/?l=bugtraq&m=109267937212298&w=2 marc.info
- http://secunia.com/advisories/12317/ Exploit, Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/674542 Exploit, Patch, Third Party Advisory, US Government Resource
- http://www.osvdb.org/8985 Vendor Advisory
- http://www.pscript.de/news/index.php www.pscript.de
- http://www.securityfocus.com/bid/10954 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17003 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=109267937212298&w=2 marc.info
- http://secunia.com/advisories/12317/ Exploit, Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/674542 Exploit, Patch, Third Party Advisory, US Government Resource
- http://www.osvdb.org/8985 Vendor Advisory
- http://www.pscript.de/news/index.php www.pscript.de
- http://www.securityfocus.com/bid/10954 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17003 exchange.xforce.ibmcloud.com