Description
Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in search_forums.cfm, as used in the "Search For:" field.
References
- ADV-2005-2794 vdb-entry
- 17935 third-party-advisory
- http://pridels0.blogspot.com/2005/12/magic-forum-personal-sqlxss-vuln.html
- 15774 vdb-entry