Description
Cross-site scripting (XSS) vulnerability in topic.php in phpMyForum 4.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.
References
- 20678 third-party-advisory
- http://pridels0.blogspot.com/2006/06/phpmyforum-413-xss-vuln.html
- 26678 vdb-entry
- 18542 vdb-entry
- ADV-2006-2437 vdb-entry
- phpmyforum-topic-xss(27250) vdb-entry