Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2002-1458

Overview

Vulnerability Score 7.5 7.5
CVE Id CVE-2002-1458
Last Modified 05 Sep 2008 04:30:39
Published 09 Jun 2003 12:00:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2002-1458

Summary

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, (3) Subject and (4) Body.

Vulnerable Systems

Application

  • Leszek Krupinski L-forum 2.4.0


References

BID - 5462

XF - lforum-html-message-xss(9838)

MISC - http://sourceforge.net/tracker/download.php?group_id=53716&atid=471343&file_id=26687&aid=579278

BUGTRAQ - 20020813 L-Forum XSS and upload spoofing


Last Updated: 27 May 2016 10:37:20