Description
Multiple cross-site scripting (XSS) vulnerabilities in ThWboard Beta 2.8 and 2.81 allow remote attackers to inject arbitrary web script or HTML via (1) time in board.php, (2) the profile Homepage-Feld, (3) pictures, and (4) other "Diverse XSS Bugs."
References
- 10120 third-party-advisory
- thwboard-multiple-fields-xss(13582) vdb-entry
- 4825 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=195009
- 4828 vdb-entry
- 8959 vdb-entry
- 4829 vdb-entry
- 4827 vdb-entry
- 4826 vdb-entry
- 3077 vdb-entry