Unscored CVE-2002-2230 EUVD-2002-2209GHSA-5v52-2fm6-v3mj

Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via a private me…

Published Oct 14, 2007 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via a private message with a javascript: URL in the IMG tag, in which the URL ends in a ".gif" or ".jpg" string, a variant of CVE-2002-0328.

References

ikonboard-html-image-xss(10268) vdb-entry
20021004 SECURITY.NNOV: ikonboard 3.1.1 CSS mailing-list