Unscored CVE-2004-2738 EUVD-2004-2728GHSA-6xqv-7w4h-6vqr

Cross-site scripting (XSS) vulnerability in check_user_id.php in ZeroBoard 4.1pl4 and earlier allows remote attackers to inject arbitrary w…

Published Oct 9, 2007 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in check_user_id.php in ZeroBoard 4.1pl4 and earlier allows remote attackers to inject arbitrary web script or HTML via the user_id parameter.

References

20041224 STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoard mailing-list
20041223 STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoard mailing-list
12582 vdb-entry
13649 third-party-advisory
12103 vdb-entry
zeroboard-checkuserid-xss(18680) vdb-entry
1012677 vdb-entry