CVE-2007-0398

CVE-2007-0398 describes multiple cross-site scripting (XSS) vulnerabilities in the forum.php3 component of Arnaud Guyonne’s a-forum. The flaws allow remote attackers to inject arbitrary web script or HTML through the (1) Sujet and (2) Pseudo input fields. The issue affects the affected forum’s in...