CVE-2007-4899: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to forumforum.php, or the searchstring parameter to forumtextsearchaction.php in a (2) titles or (3) bodies search.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4899?
CVE-2007-4899 is considered to have a moderate severity due to potential remote exploitation via cross-site scripting.
How do I fix CVE-2007-4899?
To fix CVE-2007-4899, upgrade to a version of Boinc Forum that is newer than 5.10.20, where the vulnerabilities have been addressed.
What are the vulnerable parameters in CVE-2007-4899?
The vulnerable parameters in CVE-2007-4899 are id in forum_forum.php and search_string in forum_text_search_action.php for titles and bodies search.
Who is affected by CVE-2007-4899?
Users of Boinc Forum versions 5.10.20 and earlier are affected by CVE-2007-4899.
What type of attack does CVE-2007-4899 enable?
CVE-2007-4899 enables attackers to perform cross-site scripting attacks, allowing them to inject arbitrary web scripts or HTML.