Description
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the subject field of (1) a private message (PM) or (2) a bulletin board post.
References
- 20061118 Vikingboard (0.1.2) [ multiples vulnerability ] mailing-list
- 30529 vdb-entry
- 1982 third-party-advisory
- 21196 vdb-entry
- vikingboard-subject-xss(30387) vdb-entry
- 23026 third-party-advisory