Description
Cross-site scripting (XSS) vulnerability in tag.php in CloudNine Interactive CJ Tag Board 3.0 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a url BBcode tag in the cjmsg parameter.
References
- 20000 vdb-entry
- tag-board-tag-xss(28501) vdb-entry
- http://evuln.com/vulns/137/summary.html
- 20060912 [eVuln] CJ Tag Board XSS Vulnerability mailing-list
- 1580 third-party-advisory