CVE-2003-1184

Description

Multiple cross-site scripting (XSS) vulnerabilities in ThWboard Beta 2.8 and 2.81 allow remote attackers to inject arbitrary web script or HTML via (1) time in board.php, (2) the profile Homepage-Feld, (3) pictures, and (4) other "Diverse XSS Bugs."

Primary references

• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Exploit, Patch, Vendor Advisory
• cve@mitre.org — Exploit, Patch, Vendor Advisory
• cve@mitre.org — Exploit, Patch, Vendor Advisory
• cve@mitre.org — Exploit, Patch, Vendor Advisory
• cve@mitre.org — Exploit, Patch, Vendor Advisory
• cve@mitre.org — Exploit, Patch, Vendor Advisory
• cve@mitre.org — Patch
• cve@mitre.org
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory