CVE-2008-2997 | BDVDB-2026-31351 Detail

Description#

Cross-site scripting (XSS) vulnerability in index.php in Gravity Board X (GBX) 2.0 Beta allows remote attackers to inject arbitrary web script or HTML via the subject parameter in a postnewsubmit (aka create new thread) action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/29685
https://www.exploit-db.com/exploits/5791
http://securityreason.com/securityalert/3970
https://exchange.xforce.ibmcloud.com/vulnerabilities/43021

Exploit#

https://www.exploit-db.com/exploits/5791

History#

Version 12008-07-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.