Description
Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) forumID, (2) boardID, and (3) topicRepeater1-p parameters in topics.aspx, (4) boardID parameter in categoryindex.aspx, (5) postID parameter in posts.aspx, (6) catID parameter in forums.aspx, and (7) memberID parameter in member.aspx.
References
- http://pridels0.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html
- 17906 third-party-advisory
- ADV-2005-2757 vdb-entry
- 21514 vdb-entry
- 21515 vdb-entry
- 21511 vdb-entry
- idealbbnet-multiple-scripts-xss(23471) vdb-entry
- 21512 vdb-entry
- 21513 vdb-entry