Vulnerabilities > CVE-2005-0878 - HTML Injection vulnerability in MercuryBoard Title Field

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

mercuryboard

NVD

Published: 2005-03-23

Updated: 2017-07-11

Summary

Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a PM (private message).

Vulnerable Configurations

Part	Description	Count
Application	Mercuryboard Mercuryboard Mercuryboard Message Board 1.0 Mercuryboard Mercuryboard Message Board 1.0.1 Mercuryboard Mercuryboard Message Board 1.0.2 Mercuryboard Mercuryboard Message Board 1.1 Mercuryboard Mercuryboard Message Board 1.1.1 Mercuryboard Mercuryboard Message Board 1.1.2	6

References

http://secunia.com/advisories/14679
http://www.securityfocus.com/bid/12872
https://exchange.xforce.ibmcloud.com/vulnerabilities/19797