Описание
Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field.
Ссылки
- ExploitVendor Advisory
- Vendor Advisory
- Exploit
- ExploitVendor Advisory
- Vendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:adn_forum:adn_forum:1.0:*:*:*:*:*:*:*
cpe:2.3:a:adn_forum:adn_forum:1.0b:*:*:*:*:*:*:*
EPSS
Процентиль: 72%
0.00731
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field.
EPSS
Процентиль: 72%
0.00731
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other