Description
Cross-site scripting (XSS) vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers to inject arbitrary web script or HTML via the q parameter in forgot.php, which is echoed in an error message, and other unspecified vectors.
References
- http://www.nukedx.com/?viewdoc=33
- 1016172 vdb-entry
- 18147 vdb-entry
- tinybb-forgot-xss(26829) vdb-entry
- 20060528 Advisory: tinyBB <= 0.3 Multiple Remote Vulnerabilities. mailing-list
- 1011 third-party-advisory
- http://www.nukedx.com/?getxpl=33