Vulnerabilities > CVE-2005-0910 - Cross-Site Scripting vulnerability in E-Xoops
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE network
e-xoops
Summary
Multiple cross-site scripting (XSS) vulnerabilities in exoops allow remote attackers to inject arbitrary web script or HTML via (1) the sortdays parameter to viewforum.php or (2) the viewcat parameter to index.php.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |