medium4.3Public exploit code
CVE-2008-3391
Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Web Wiz Forum 9.5 - 'admin_category_details.asp?mode' Cross-Site Scripting2008-07-28 · webapps · asp · Verified
- Web Wiz Forum 9.5 - 'admin_group_details.asp?mode' Cross-Site Scripting2008-07-28 · webapps · asp · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter to (1) admin_group_details.asp and (2) admin_category_details.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webwizguide | Web Wiz Forum | Version 9.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://depo2.nm.ru/WebWiz_Forum_v9.5_XSS.txt
- http://depo2.nm.ru/WebWiz_Forum_v9.5_XSS2.txt
- http://secunia.com/advisories/31281
- http://www.securityfocus.com/bid/30398
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44012
- http://depo2.nm.ru/WebWiz_Forum_v9.5_XSS.txt
- http://depo2.nm.ru/WebWiz_Forum_v9.5_XSS2.txt
- http://secunia.com/advisories/31281
- http://www.securityfocus.com/bid/30398
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44012