CVE-2006-1202

The vulnerability CVE-2006-1202 affects textfileBB version 1.0 and earlier. The issue is a cross-site scripting (XSS) flaw in the messanger.php endpoint, where the parameters mess and user can be exploited to inject arbitrary web script or HTML (potentially with URL-encoded values). Exploitation ...