CVEvulnerability
CVE-2008-6437
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-03-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to error.php, and the (2) nickname and (3) randomid parameters to part/menu.php.
Affected configurations
• lukas waldauf phpfreeforum (<= 1.0)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/45607 osvdb.org
- http://osvdb.org/45608 osvdb.org
- http://secunia.com/advisories/30372 Vendor Advisory
- http://www.securityfocus.com/archive/1/492445/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29337 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42586 exchange.xforce.ibmcloud.com
- http://osvdb.org/45607 osvdb.org
- http://osvdb.org/45608 osvdb.org
- http://secunia.com/advisories/30372 Vendor Advisory
- http://www.securityfocus.com/archive/1/492445/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29337 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42586 exchange.xforce.ibmcloud.com