medium4.3Public exploit code
CVE-2005-1008
Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ASP-DEV XM Forum RC3 - IMG Tag Script Injection2005-03-31 · webapps · asp · Verified
Impact
Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asp-Dev | Xm Forum | Version rc3 |