CVE-2008-0436

CVE-2008-0436 refers to a cross-site scripting (XSS) vulnerability in PD9 Software MegaBBS 1.5.14b. The flaw resides in the profile-upload/upload.asp endpoint, exploitable via the target parameter to inject arbitrary web script or HTML. NVD indicates the attack could be remote and non-authenticat...