CVE-2007-5564

NSSboard (formerly Simple PHP Forum) 6.1 is affected by multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via (1) HTML tags when BBCode is disabled; or (2) the user, (3) email, or (4) Real Name fields in a profile. The connected documents confirm the ...