CVE
- Id
- 5842
- CVE No.
- CVE-2002-1458
- Status
- Candidate
- Description
- Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, (3) Subject and (4) Body.
- Phase
- Proposed (20030317)
- Votes
- ACCEPT(1) Cole | NOOP(2) Cox, Wall
- Comments