Unscored CVE-2014-7262 EUVD-2014-7133GHSA-73q3-69wr-cfqr

Cross-site scripting (XSS) vulnerability in the Omake BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web …

Published Dec 12, 2014 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in the Omake BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted string.

References

http://jvn.jp/en/jp/JVN98097877/360573/index.html
JVNDB-2014-000145 third-party-advisory
JVN#98097877 third-party-advisory