CVEvulnerability
CVE-2014-9468
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-02-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in InstantASP InstantForum.NET 4.1.3, 4.1.2, 4.1.1, 4.0.0, 4.1.0, and 3.4.0 allow remote attackers to inject arbitrary web script or HTML via the SessionID parameter to (1) Join.aspx or (2) Logon.aspx.
Affected configurations
• instantasp instantforum 3.4.0
• instantasp instantforum 4.1.0
• instantasp instantforum 4.1.1
• instantasp instantforum 4.1.2
• instantasp instantforum 4.1.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://seclists.org/fulldisclosure/2015/Feb/70 seclists.org
- http://tetraph.com/security/cves/cve-2014-9468-instantasp-instantforum-net-multiple-xss-cross-site-scripting-security-vulnerabilities/ tetraph.com
- http://www.securitytracker.com/id/1033434 www.securitytracker.com
- http://seclists.org/fulldisclosure/2015/Feb/70 seclists.org
- http://tetraph.com/security/cves/cve-2014-9468-instantasp-instantforum-net-multiple-xss-cross-site-scripting-security-vulnerabilities/ tetraph.com
- http://www.securitytracker.com/id/1033434 www.securitytracker.com