Security Advisory

CVE-2012-4873

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-09-06 21:00:00

Last updated 2024-09-17 01:40:54

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the file_download function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename parameter.

← Browse all CVEs View on cve.org ↗