CVE-2008-5399

CVE-2008-5399

EPSS 1.3%

Cross-site scripting (XSS) vulnerability in the listonlineusers (aka "Who's online") component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/50403 http://secunia.com/advisories/32931 http://security.bkis.vn/?p=286 http://securityreason.com/securityalert/4699 http://www.mvnforum.com/mvnforum/viewthread_thread%2C4361 http://www.securityfocus.com/archive/1/498872/100/0/threaded http://www.securityfocus.com/bid/32605