Description
Cross-site scripting (XSS) vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) fwd parameter in admin/adminsignin.html and (2) originalpageid parameter in admin/newpage.html associated with a group.
References
- 15850 vdb-entry
- http://pridels0.blogspot.com/2005/12/projectforum-470-vuln.html
- ADV-2005-2921 vdb-entry
- 21734 vdb-entry
- 18071 third-party-advisory
- 21733 vdb-entry