CVE
- Id
- 5843
- CVE No.
- CVE-2002-1459
- Status
- Candidate
- Description
- Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, and (3) Subject.
- Phase
- Proposed (20030317)
- Votes
- ACCEPT(2) Baker, Cole | NOOP(2) Cox, Wall
- Comments