CVE-2009-3204 | BDVDB-2026-38511 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in Stiva Forum 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) demo.php and (2) forum.php, and the PATH_INFO to (3) include_forum.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/57177
http://osvdb.org/57178
https://exchange.xforce.ibmcloud.com/vulnerabilities/52613
http://secunia.com/advisories/36409
http://packetstormsecurity.org/0908-exploits/stivaforum-xss.txt

Exploit#

No public exploit known

History#

Version 12009-09-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.