JVNDB-2009-000022

Cross-site scripting vulnerability in MiniBBS from CGI RESCUE

MiniBBS from CGI RESCUE contains a cross-site scripting vulnerability.

MiniBBS is a message board script provided by CGI RESCUE, contains a cross-site scripting vulnerability.

This vulnerability has been fixed and an updated version was released on December 13, 2008.

Base Metrics: 2.6 (Low) [IPA Score]

• Access Vector: Network
• Access Complexity: High
• Authentication: None
• Confidentiality Impact: None
• Integrity Impact: Partial
• Availability Impact: None

CGI RESCUE

• MiniBBS v10 - 10.31 and earlier
• MiniBBS v9 - 9.07 and earlier
• MiniBBS v8 - 8.94 and earlier
• MiniBBS v8t - 8.93t and earlier

An arbitrary script may be executed on the user's web browser.

[Update the software]
Update to the latest version according to the information provided by the vendor.

CGI RESCUE

• CGI RESCUE : FORM2MAIL, MiniBBS22 and MiniBBS vulnerability information (Japanese)
• CGI RESCUE : MiniBBS (Japanese)

1. Cross-site Scripting(CWE-79) [IPA Evaluation]

1. CVE-2009-1588

1. JVN : JVN#11396739
2. National Vulnerability Database (NVD) : CVE-2009-1588
3. Secunia Advisory : SA34887
4. SecurityFocus : 34718
5. ISS X-Force Database : 50219
6. JVN iPedia (Japanese) : JVNDB-2009-000022

[2009/04/28]
  Web page published