Description
Cross-site scripting (XSS) vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to inject arbitrary web script or HTML via the az parameter.
References
- 19815 third-party-advisory
- 17697 vdb-entry
- 24988 vdb-entry
- 792 third-party-advisory
- ADV-2006-1532 vdb-entry
- 20060425 DCForumLite V 3.0<--XSS/SQL Injection mailing-list
- dcforumlite-dcboard-xss(26083) vdb-entry