Vulnerability in Ekinboard

CVE-2005-3638

Cross-site scripting (XSS) vulnerabilities in Ekinboard 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in profile.php and (2) titles of posts.

EPSS: 0.020 (78.4th percentile) — read the EPSS interpretation.

Affected products

  • Ekinboard — versions 1.0.3
  • N/a — versions n/a

References