Description (CNA)
Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/13782
- http://marc.info/?l=bugtraq&m=110537385427004&w=2
- http://www.securityfocus.com/bid/12199
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18814
ADP enrichment
No English description supplied.