Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the (1) user[msn], (2) user[email], and (3) user[phone] parameters in a modifyDetails action.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2011-07-08T22:00:00

Updated: 2024-08-07T04:02:29.634Z

Reserved: 2011-07-08T00:00:00

Link: CVE-2010-4811

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-07-08T22:55:00.867

Modified: 2024-11-21T01:21:49.833

Link: CVE-2010-4811

cve-icon Redhat

No data.