medium5.0Public exploit code
CVE-2002-0535
Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode i…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PostBoard 2.0 - Topic Title Script Execution2002-04-19 · webapps · php · Verified
- PostBoard 2.0 - BBCode IMG Tag Script Injection2002-04-19 · webapps · php · Verified
Impact
Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Postboard | Postboard | Versions 2.0, 2.0.1 |
| Postnuke Software Foundation | Postnuke | Versions 0.64, 0.70, 0.71, 0.703 |
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/1/267936
- http://www.iss.net/security_center/static/8881.php
- http://www.securityfocus.com/bid/4559
- http://www.securityfocus.com/bid/4561
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8884
- http://online.securityfocus.com/archive/1/267936
- http://www.iss.net/security_center/static/8881.php
- http://www.securityfocus.com/bid/4559
- http://www.securityfocus.com/bid/4561
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8884