Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and...
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) forumID, (2) boardID, and (3) topicRepeater1-p parameters in topics.aspx, (4) boardID parameter in categoryindex.aspx, (5) postID parameter in posts.aspx, (6) catID parameter in forums.aspx, and (7) memberID parameter in member.aspx.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-4078
Credits & Attribution
No credits recorded in the NVD database.
References
- http://pridels0.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html
- http://secunia.com/advisories/17906
- http://www.vupen.com/english/advisories/2005/2757
- http://www.osvdb.org/21514
- http://www.osvdb.org/21515
- http://www.osvdb.org/21511
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23471
- http://www.osvdb.org/21512
- http://www.osvdb.org/21513
More from ideal science
View All →Affected Vendor
ideal science
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.