Beveiligingsadvies

CVE-2002-1459

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2003-03-18 05:00:00
Laatst bijgewerkt 2024-08-08 03:26:28
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, and (3) Subject.