CVE-2008-0757

The CVE-2008-0757 entry documents a Cross-site Scripting (XSS) vulnerability in MercuryBoard 1.1.5, specifically in index.php where the message parameter (the message text area) can be exploited to inject arbitrary web script or HTML. The issue can lead to an injection during Private Message (PM)...