CVE-2008-0775 | BDVDB-2026-29257 Detail

Description#

Cross-site scripting (XSS) vulnerability in sboxDB.php in Simple Machines Forum (SMF) Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&#", contain the desired script, and end with ";".

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/28900
http://www.securityfocus.com/archive/1/491357/100/0/threaded
http://www.securityfocus.com/archive/1/489964/100/0/threaded
http://www.securityfocus.com/archive/1/487912/100/0/threaded
http://www.securityfocus.com/bid/27727
http://securityreason.com/securityalert/3651

Exploit#

No public exploit known

History#

Version 12008-02-13Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.