Описание
Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field.
Ссылки
- ExploitVendor Advisory
- Vendor Advisory
- Exploit
- ExploitVendor Advisory
- Vendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:adn_forum:adn_forum:1.0:*:*:*:*:*:*:*
cpe:2.3:a:adn_forum:adn_forum:1.0b:*:*:*:*:*:*:*
EPSS
Процентиль: 70%
0.01429
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
около 4 лет назад
Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field.
EPSS
Процентиль: 70%
0.01429
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other