CVE-2006-0366

Affects Phpclanwebsite (aka PCW). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web scripts or HTML via a javascript URI in a BBCode img tag. Based on the connected records, the issue arises from untrusted input being processed in BBCode r...