Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AspBB 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 action parameter to default.asp or 2 get parameter to profile.asp...