Vulnerabilities > CVE-2005-4642 - Cross-Site Scripting vulnerability in Hydrobb 1.0.0Beta2

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
hydrobb
NVD
Published: 2005-12-31
Updated: 2017-07-20

Summary

Multiple cross-site scripting (XSS) vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to (1) search.php, (2) members.php, (3) stats.php, (4) viewforum.php, (5) register.php, (6) usercp.php, (7) groups.php, (8) pms.php, and (9) calendar.php.

Vulnerable Configurations

Part Description Count
Application
Hydrobb
1

References