Description
Cross-site scripting (XSS) vulnerability in block-Forums.php in the Splatt Forum module for PHP-Nuke 6.x allows remote attackers to inject arbitrary web script or HTML via the subject parameter.
References
- 20030401 Re: PHP-Nuke block-Forums.php subject vulnerabilities mailing-list
- 8478 third-party-advisory
- phpnuke-blockforums-subject-xss(11675) vdb-entry
- 20030331 PHP-Nuke block-Forums.php subject vulnerabilities mailing-list
- 3718 third-party-advisory
- 7248 vdb-entry