NetSight
IP …
medium4.3

CVE-2010-3931

Cross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 …

Impact

Cross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.37 and earlier, PM bbs 1.07 and earlier, PM up bbs 1.08 and earlier, and PM forum 1.18 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected products

VendorProductAffected versions
RocomotionP Board
through 1.18
RocomotionP Diary R
through 1.13
RocomotionP Forum
through 1.30
RocomotionP Link
through 1.11
RocomotionP Link Compact
through 1.04
RocomotionP Up Board
through 1.38
RocomotionPm Bbs
through 1.07
RocomotionPm Forum
through 1.18
RocomotionPplog
through 3.31
RocomotionPplog 2
through 3.37

Weakness classification

CWE-79

References