Description
Cross-site scripting (XSS) vulnerability in register.php in TheWebForum (twf) 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the www parameter.
References
- 1015450 vdb-entry
- 20060106 [eVuln] TheWebForum Script Insertion and Authentication Bypass mailing-list
- http://evuln.com/vulns/17/exploit.html
- ADV-2006-0093 vdb-entry
- 18392 third-party-advisory
- 16161 vdb-entry
- http://evuln.com/vulns/17/summary.html
- thewebforum-register-xss(24007) vdb-entry
- 22295 vdb-entry