CVE-2002-0535

Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.

Published: Jul 3, 2002
Updated: Apr 13, 2023
CVE: CVE-2002-0535
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
postnuke_software_foundation / postnuke	0.71	0.71.x
postboard / postboard	2.0.1	2.0.1.x
postnuke_software_foundation / postnuke	0.64	0.64.x
postnuke_software_foundation / postnuke	0.703	0.703.x
postboard / postboard	2.0	2.0.x
postnuke_software_foundation / postnuke	0.70	0.70.x

http://online.securityfocus.com/archive/1/267936
http://www.iss.net/security_center/static/8881.php
http://www.securityfocus.com/bid/4559
http://www.securityfocus.com/bid/4561
https://exchange.xforce.ibmcloud.com/vulnerabilities/8884

Vulnerability Database

289,697

CVE-2002-0535