Description
Cross-site scripting (XSS) vulnerability in viewposts.cfm in aXentForum II and earlier allows remote attackers to inject arbitrary web script or HTML via the startrow parameter.
References
- http://pridels0.blogspot.com/2006/06/axentforum-ii-xss-vuln.html
- 18473 vdb-entry
- 20060622 Re: aXentForum II XSS vuLLn mailing-list
- axentforum-viewposts-xss(27136) vdb-entry
- 20060616 aXentForum II XSS vuLLn mailing-list
- 1016320 vdb-entry
- ADV-2006-2407 vdb-entry