Unscored CVE-2007-6616 EUVD-2007-6581GHSA-fr5c-m332-p89f

Cross-site scripting (XSS) vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier allows remote attackers to inject arbitrary we…

Published Jan 3, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchkey parameter in a search action. NOTE: some of these details are obtained from third party information.

References

20071224 SimpleForum <= 4.6.2 - Cross-Site Scripting Vulnerability mailing-list
simpleforum-simpleforum-xss(39202) vdb-entry
3509 third-party-advisory
28235 third-party-advisory
27005 vdb-entry