CVE-2009-3060 | BDVDB-2026-38255 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the notice parameter to editform.php, (2) the edit_user_message parameter to core/edit_user_message.php, or (3) the user_title parameter to inc/head.inc.php, reachable through any PHP script.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.org/0908-exploits/jboard-sql.txt
http://www.vupen.com/english/advisories/2009/2473

Exploit#

No public exploit known

History#

Version 12009-09-03Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.