Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/10405 | Exploit Vendor Advisory |
http://www.osvdb.org/6410 | Exploit Vendor Advisory |
http://secunia.com/advisories/11696 | Vendor Advisory |
http://marc.info/?l=bugtraq&m=108541119526279&w=2 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/16241 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-05-20 21:00
Updated : 2017-07-10 18:31
NVD link : CVE-2004-2031
Mitre link : CVE-2004-2031
JSON object : View
CWE
Products Affected
e107
- e107