Vulnerabilities > Bbsxp
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2010-04-06 | CVE-2010-1276 | Cross-Site Scripting vulnerability in Bbsxp 2008 Multiple cross-site scripting (XSS) vulnerabilities in BBSXP 2008 SP2 allow remote attackers to inject arbitrary web script or HTML via the URI in a request to (1) AddPost.asp, (2) AddTopic.asp, (3) Admin_Default.asp, (4) Bank.asp, (5) Manage.asp, and (6) ShowPost.asp. | 4.3 |
2010-04-06 | CVE-2010-1275 | Cross-Site Scripting vulnerability in Bbsxp 2008 Cross-site scripting (XSS) vulnerability in ShowPost.asp in BBSXP 2008 allows remote attackers to inject arbitrary web script or HTML via the ThreadID parameter. | 4.3 |
2009-01-27 | CVE-2009-0285 | Cross-Site Scripting vulnerability in Bbsxp Cross-site scripting (XSS) vulnerability in error.asp in BBSXP 5.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter. | 4.3 |