CVE-2004-1589

Cross-site scripting (XSS) vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the (1) Category parameter to Forum.asp or (2) MainMessageID parameter to ReplyToQuestion.asp.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-08-08

Affected products

• Gosmart Message Board (Gosmart)

References

• http://marc.info/?l=bugtraq&m=109751522823011&w=2
• http://secunia.com/advisories/12790/
• http://www.securityfocus.com/bid/11361
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17679