NuytsTech Security

CVE-2008-5399

by ·

Cross-site scripting (XSS) vulnerability in the listonlineusers (aka "Who’s online") component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Date published : 2008-12-09

http://www.securityfocus.com/bid/32605

http://www.securityfocus.com/archive/1/498872/100/0/threaded

Tags: