CVE-2005-1569

The CVE-2005-1569 entry describes a Cross-site Scripting (XSS) flaw in DirectTopics 2.1 and 2.2. The vulnerability arises from accepting a javascript: URL in either a thread context or an IMG tag, enabling remote script injection. Affected product is DirectTopics (versions 2.1/2.2); root cause is...