Description
Cross-site scripting (XSS) vulnerability in iforget.aspx in dotNetBB 2.42EC SP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the em parameter.
References
- dotnetbb-iforget-xss(25462) vdb-entry
- 17246 vdb-entry
- http://pridels0.blogspot.com/2006/03/xss-vuln-in-dotnetbb-v24.html
- 24122 vdb-entry
- 19398 third-party-advisory
- ADV-2006-1098 vdb-entry