CVE-2008-5399

Cross-site scripting (XSS) vulnerability in the listonlineusers (aka "Who's online") component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Link	Resource
http://secunia.com/advisories/32931	Vendor Advisory
http://www.securityfocus.com/bid/32605
http://www.mvnforum.com/mvnforum/viewthread_thread,4361
http://osvdb.org/50403
http://security.bkis.vn/?p=286
http://securityreason.com/securityalert/4699
http://www.securityfocus.com/archive/1/498872/100/0/threaded

Configuration 1

cpe:2.3:a:mvnforum:mvnforum:1.0.2.:ga:*:*:*:*:*:* cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta3:*:*:*:*:*:* cpe:2.3:a:mvnforum:mvnforum:1.1:ga:*:*:*:*:*:* cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta2:*:*:*:*:*:* cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc2:*:*:*:*:*:* cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc4:*:*:*:*:*:* cpe:2.3:a:mvnforum:mvnforum:*:ga:*:*:*:*:*:* cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta1:*:*:*:*:*:* cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc3_01:*:*:*:*:*:* cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc1:*:*:*:*:*:*

---

Published : 2008-12-10 06:44

Updated : 2018-10-11 08:55

---

NVD link : CVE-2008-5399

Mitre link : CVE-2008-5399

No products.

CWE-79