Unscored CVE-2007-5564 EUVD-2007-5539GHSA-qp78-349m-vrqw

Multiple cross-site scripting (XSS) vulnerabilities in NSSboard (formerly Simple PHP Forum) 6.1 allow remote attackers to inject arbitrary …

Published Oct 18, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in NSSboard (formerly Simple PHP Forum) 6.1 allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags when BBcode is disabled; or the (2) user, (3) email, or (4) Real Name fields in a profile.

References

nssboard-profile-xss(37218) vdb-entry
3246 third-party-advisory
20071014 HTML Injection Vuln in nssboard mailing-list
26081 vdb-entry