Vulnerabilities > CVE-2010-4264 - Unspecified vulnerability in Vanillaforums Vanilla Forums

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

vanillaforums

NVD

Published: 2021-06-22

Updated: 2024-11-21

Summary

It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side.

Vulnerable Configurations

Part	Description	Count
Application	Vanillaforums Vanillaforums Vanilla Forums - Vanillaforums Vanilla Forums 2.0 Vanillaforums Vanilla Forums 2.0.1 Vanillaforums Vanilla Forums 2.0.2 Vanillaforums Vanilla Forums 2.0.3 Vanillaforums Vanilla Forums 2.0.4 Vanillaforums Vanilla Forums 2.0.5 Vanillaforums Vanilla Forums 2.0.6 Vanillaforums Vanilla Forums 2.0.7 Vanillaforums Vanilla Forums 2.0.8 Vanillaforums Vanilla Forums 2.0.9	11

References

https://github.com/vanilla/vanilla/commit/4535a059e4e24ca11a2ef0b4d754f262398bcece
https://github.com/vanilla/vanilla/commit/4535a059e4e24ca11a2ef0b4d754f262398bcece
https://seclists.org/oss-sec/2010/q4/282
https://seclists.org/oss-sec/2010/q4/282