CVE-2005-4336

CVE-2005-4336 describes a Cross-site scripting (XSS) vulnerability in ProjectForum 4.7.0 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters (1) fwd in admin/adminsignin.html and (2) originalpageid in admin/newpage.html, associated with a group...