Vulnerability in Demof Forumwa

CVE-2005-0628

Multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in search.php or the (2) body or (3) subject of a forum message.

EPSS: 0.012 (64.9th percentile) — read the EPSS interpretation.

Affected products

Demof Forumwa — versions v1
N/a — versions n/a

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)