Cross-Site Scripting Vulnerability in bbPress 0.8.1
CVE-2007-3243

Currently unrated

Key Information:

Vendor

Bbpress

Status
Bbpress
Vendor
CVE Published:
15 June 2007

What is CVE-2007-3243?

A Cross-Site Scripting (XSS) vulnerability exists in the bb-login.php file of bbPress version 0.8.1. This allows remote attackers to inject arbitrary web scripts or HTML into the application's response by exploiting the 're' parameter. Successful exploitation may require the target client to be manipulated into sending a specific Referer header, potentially allowing for unauthorized actions or access on behalf of legitimate users.

References

http://www.dragoslungu.com/2007/05/30/top-10-open-source-...
x_refsource_MISC
http://osvdb.org/36818
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/24422
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.