Description
Multiple cross-site scripting (XSS) vulnerabilities in bbcodes system in e107 before 0.7.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
References
- 16614 vdb-entry
- http://e107.org/comment.php?comment.news.776
- ADV-2006-0540 vdb-entry
- 18816 third-party-advisory
- e107-bbcode-xss(24625) vdb-entry