Unscored CVE-2002-2231 EUVD-2002-2210GHSA-2hpg-vqvj-82fm

Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) a javasc…

Published Oct 14, 2007 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) a javascript: URL in a photo URL or (2) an X-Forwarded-For: header.

References

20021209 SECURITY.NNOV: more Ikonboard 3.1.1 crossite scriptings mailing-list
6342 vdb-entry
6343 vdb-entry
ikonboard-html-photo-xss(10797) vdb-entry
ikonboard-xforwardedfor-header-xss(10799) vdb-entry