CVE-2013-5309 - CVE House
Back to Database
Status published Low CVE-2013-5309

Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a new user, allows remote attackers to inject arbitrary web script or HTML via a custom profile field to index.php. NOTE: some of these details are obtained from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-5309

Credits & Attribution

No credits recorded in the NVD database.

References

More from fudforum

View All →
CVE-2022-30863
FUDForum 3.1.2 is vulnerable to Cross Site Scripting (XSS) via...
Medium 4.8
CVE-2022-30861
FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name...
Medium 4.8
CVE-2022-30860
FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload...
High 7.2
CVE-2022-28545
FUDforum 3.1.1 is vulnerable to Stored XSS....
Medium 5.4
CVE-2021-27520
A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote...
Medium 6.1

Affected Vendor

Affected Software

fudforum
Vulnerable Versions:
0, 2.7.2, 2.7.3, 2.7.4, 2.7.5, 2.7.6, 2.7.7, 2.8.0, 2.8.1, 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 1.2.8, 1.9.8, 2.0.2, 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.3.0, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.3.6, 2.3.7, 2.3.8, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.7.0, 2.7.1

Timeline

Official Publish: August 16th, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.