Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the (1) user[msn], (2) user[email], and (3) user[phone] parameters in a modifyDetails action.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2011-07-08T22:00:00
Updated: 2024-08-07T04:02:29.634Z
Reserved: 2011-07-08T00:00:00
Link: CVE-2010-4811
Vulnrichment
No data.
NVD
Status : Modified
Published: 2011-07-08T22:55:00.867
Modified: 2024-11-21T01:21:49.833
Link: CVE-2010-4811
Redhat
No data.