XSS in Rocomotion P Board
CVE-2010-3931
Cross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.37 and earlier, PM bbs 1.07 and earlier, PM up bbs 1.08 and earlier, and PM forum 1.18 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.015 (71.9th percentile) — read the EPSS interpretation.
Affected products
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (Third Party Advisory, x_refsource_JVN, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_JVNDB, Third Party Advisory, third-party-advisory)
- vultures@jpcert.or.jp (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- vultures@jpcert.or.jp (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
- vultures@jpcert.or.jp (x_refsource_CONFIRM, Vendor Advisory)
- vultures@jpcert.or.jp (x_refsource_OSVDB, vdb-entry, Broken Link)