CVE-2008-6431

EPSS 1.8%

Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) outpused parameter to index.php, the (2) footer_copyright and (3) verandproname parameters to newtem/footer/bsd01footer.php, and the (4) topads and (5) myplugin parameters to newtem/header/bsd01header.php.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/31826unverified exploitdbwww.exploit-db.com/exploits/31827unverified exploitdbwww.exploit-db.com/exploits/31825unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/45612 http://osvdb.org/45613 http://osvdb.org/45614 http://secunia.com/advisories/30369 https://exchange.xforce.ibmcloud.com/vulnerabilities/42590 http://www.securityfocus.com/archive/1/492449/100/0/threaded http://www.securityfocus.com/bid/29339