NetSight
IP …
medium4.3

CVE-2009-2217

Cross-site scripting (XSS) vulnerability in NBBC before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via an invalid URL in a BBCode img…

Impact

Cross-site scripting (XSS) vulnerability in NBBC before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via an invalid URL in a BBCode img tag.

Affected products

VendorProductAffected versions
Phantom-InkerNbbc
through 1.4.1
Versions 1.0, 1.1, 1.2, 1.3, 1.3.1

Weakness classification

CWE-79

References