Description
Multiple cross-site scripting (XSS) vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) tname or (2) fpost parameters to (a) post.php; (3) fullname, (4) emailadd, (5) country, (6) sig, or (7) otherav parameters to (b) editac.php; or (8) fullname, (9) emailadd, or (10) country parameters to (c) register.php.
References
- 24339 vdb-entry
- awebbb-multiple-xss(25585) vdb-entry
- 19486 third-party-advisory
- 20060415 [eVuln] aWebBB Multiple XSS and SQL Injection Vulnerabilities mailing-list
- 24338 vdb-entry
- http://evuln.com/vulns/117/summary.html
- ADV-2006-1197 vdb-entry
- 17352 vdb-entry
- 24337 vdb-entry