CVE-2008-2493

CVE-2008-2493 describes a Cross-site scripting (XSS) vulnerability in Campus Bulletin Board 3.4, specifically in post3/Book.asp where the review parameter can be used to inject arbitrary script or HTML. The affected component is the review parameter within post3/Book.asp; no root-cause details or...