Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) forumID, (2) boardID, and (3) topicRepeater1-p parameters in topics.aspx, (4) boardID parameter in categoryindex.aspx, (5) postID parameter in posts.aspx, (6) catID parameter in forums.aspx, and (7) memberID parameter in member.aspx.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-12-08T01:00:00

Updated: 2024-08-07T23:31:48.986Z

Reserved: 2005-12-08T00:00:00

Link: CVE-2005-4078

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2005-12-08T01:03:00.000

Modified: 2024-11-21T00:03:27.450

Link: CVE-2005-4078

cve-icon Redhat

No data.