CVEvulnerability
CVE-2008-5399
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-12-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the listonlineusers (aka "Who's online") component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Affected configurations
• mvnforum mvnforum (<= 1.2)
• mvnforum mvnforum 1.0.0
• mvnforum mvnforum 1.0.2.
• mvnforum mvnforum 1.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/50403 osvdb.org
- http://secunia.com/advisories/32931 Vendor Advisory
- http://security.bkis.vn/?p=286 security.bkis.vn
- http://securityreason.com/securityalert/4699 securityreason.com
- http://www.mvnforum.com/mvnforum/viewthread_thread%2C4361 URL Repurposed
- http://www.securityfocus.com/archive/1/498872/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32605 www.securityfocus.com
- http://osvdb.org/50403 osvdb.org
- http://secunia.com/advisories/32931 Vendor Advisory
- http://security.bkis.vn/?p=286 security.bkis.vn
- http://securityreason.com/securityalert/4699 securityreason.com
- http://www.mvnforum.com/mvnforum/viewthread_thread%2C4361 URL Repurposed
- http://www.securityfocus.com/archive/1/498872/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32605 www.securityfocus.com