CVE-2006-6447: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitrary web script or HTML via 1 the StrMes parameter in vfinfo.asp and possibly 2 a URL in the SRC attribute of an IFRAME element that is submitted to vfnewtopic.asp...