Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) input_name and (2) input_text parameters. NOTE: some of these details are obtained from third party information.
References
Link | Resource |
---|---|
http://www.exploit-db.com/exploits/10168 | Exploit |
http://secunia.com/advisories/37418 | Vendor Advisory |
http://osvdb.org/60310 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/54321 |
Configurations
Information
Published : 2010-04-20 07:30
Updated : 2017-08-16 18:31
NVD link : CVE-2009-4767
Mitre link : CVE-2009-4767
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
plohni
- shoutbox