EDB-36973
functionalGNUBoard 4.34.20 - 'download.php' HTML Injection
view exploit source exploit_dbverifiedtype webappsauthor wh1antpublished 2012-03-20catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-4873US | medium4.3 | Exploit | ||
Cross-site scripting (XSS) vulnerability in the file_download function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename pa… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan