Description
Multiple cross-site scripting (XSS) vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2207.
References
- 25458 vdb-entry
- 20035 third-party-advisory
- ADV-2006-1729 vdb-entry
- 20060508 Multiple Vulnerabilities In IdealBB ASP Bulletin Board mailing-list
- 17920 vdb-entry
- 871 third-party-advisory
- ldealbb-xss(26355) vdb-entry
- http://www.idealscience.com/ibb/posts.aspx?postID=24415