PT-2005-3259 · Seo Board · Seo-Board
Published
2005-07-20
·
Updated
2008-09-10
·
CVE-2005-2333
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
SEO-Board version 1.0
Description
The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the
doc parameter in the smilies popup.php file.Recommendations
For SEO-Board version 1.0, consider restricting access to the smilies popup.php file until a patch is available. As a temporary workaround, avoid using the
doc parameter in the affected file to minimize the risk of exploitation.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Seo-Board