VULHUB ™

Prospero Message Boards are a web based messaging system, supporting communities and forums. HTML formatted messages posted to Prospero forums may contain JavaScript commands. When viewed by another user, the script will be executed in the context of the forum web page. This may lead to a number of cross-agent scripting attacks. It has been reported that Prospero uses cookies for user authentication, opening the possibility that this vulnerability could be used to hijack user accounts.

Prospero Message Boards are a web based messaging system, supporting communities and forums. HTML formatted messages posted to Prospero forums may contain JavaScript commands. When viewed by another user, the script will be executed in the context of the forum web page. This may lead to a number of cross-agent scripting attacks. It has been reported that Prospero uses cookies for user authentication, opening the possibility that this vulnerability could be used to hijack user accounts.