Description
Cross-site scripting (XSS) vulnerability in ShowPost.asp in BBSXP 2008 allows remote attackers to inject arbitrary web script or HTML via the ThreadID parameter.
References
- 38855 third-party-advisory
- 20100304 [xss] a xss on "ThreadID" parameter in BBSXP 2008 from china mailing-list
- 38542 vdb-entry