Unscored CVE-2005-0216 EUVD-2005-0217GHSA-7cf4-gh7v-g4w2

Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows r…

Published Feb 6, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter.

References

13782 third-party-advisory
20050108 Security Advisory: Woltlab Burning Board Lite formmail.php XSS mailing-list
12199 vdb-entry
wbb-formmail-userid-xss(18814) vdb-entry