Description

Cross-site scripting (XSS) vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5, allows remote attackers to inject arbitrary web script or HTML via the (1) forum and (2) topic_id parameters.

Remediation

References

CVE-2004-2756

Related Vulnerabilities

MySQL Other Vulnerability (CVE-2004-0381)

MySQL CVE-2024-21236 Vulnerability (CVE-2024-21236)

phpMyAdmin Improper Input Validation Vulnerability (CVE-2011-0987)

WordPress Plugin CWIS-Antivirus Security Scanner Unspecified Vulnerability (2.3.2)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7832)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2004-2756