Security Advisory

CVE-2008-2997

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-07-03 17:47:00
Last updated 2024-08-07 09:21:34
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in index.php in Gravity Board X (GBX) 2.0 Beta allows remote attackers to inject arbitrary web script or HTML via the subject parameter in a postnewsubmit (aka create new thread) action.