CVE-2005-4311

DCForum 6.25 and earlier (and possibly DCForum+ 1.x) are affected by a Cross-site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary scripts via the page parameter in dcboard.php and via unspecified search parameters. Public references indicate an XSS with a CVSS...

CVE-2005-4311

Cross-site scripting XSS vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via 1 the page parameter in dcboard.php and 2 unspecified search parameters...