CVE

Id
65256  
CVE No.
CVE-2013-5309  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a new user, allows remote attackers to inject arbitrary web script or HTML via a custom profile field to index.php. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20130816)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
638271 65256 CVE-2013-5309 CONFIRM:http://sourceforge.net/p/fudforum/code/5589/  View
638272 65256 CVE-2013-5309 SECUNIA:54293  View
638273 65256 CVE-2013-5309 URL:http://secunia.com/advisories/54293  View
638274 65256 CVE-2013-5309 XF:fudforum-index-xss(86030)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22211 JVNDB-2013-003786 Serendipity の serendipity_admin_image_selector.php におけるクロスサイトスクリプティングの脆弱性 Serendipity の serendipity_admin_image_selector.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-5314 65256 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003786.html  View