Description
Cross-site scripting (XSS) vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter.
References
- 20797 third-party-advisory
- xennobb-messages-xss(27367) vdb-entry
- 18652 vdb-entry
- ADV-2006-2510 vdb-entry
- http://pridels0.blogspot.com/2006/06/xennobb-xss-vuln.html