Description
Cross-site scripting (XSS) vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the (1) Category parameter to Forum.asp or (2) MainMessageID parameter to ReplyToQuestion.asp.
References
- gosmart-forum-mainmessageid-xss(17679) vdb-entry
- 20041011 [MAxpatrol Security Advisory] Multiple vulnerabilities in GoSmart Message Board mailing-list
- 11361 vdb-entry
- 12790 third-party-advisory