← Database

CVE-2007-5948

MEDIUM CVSS: 4.3 Published: 2007-11-14 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in main.php in SF-Shoutbox 1.2.1 through 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) nick (aka Name) and (2) shout (aka Shout) parameters.

Affected Platforms

Script-Fun Sf-Shoutbox

Weakness Type

CWE-79

References