Description
Cross-site scripting (XSS) vulnerability in profile.php in FunkBoard 0.71 before 4 November 2006 at 18:16 GMT allows remote attackers to inject arbitrary web script or HTML, possibly via the name parameter.
References
- funkboard-profile-xss(30044) vdb-entry
- http://www.funkboard.co.uk/forum/thread.php?id=312
- 22720 third-party-advisory
- ADV-2006-4364 vdb-entry
- 20946 vdb-entry