CVE-2010-0947

CVE-2010-0947 is a cross-site scripting (XSS) vulnerability affecting Max Network Technology BBSMAX versions 3.0, 4.1 and 4.2. The flaw exists in post.aspx and allows remote attackers to inject arbitrary web script or HTML via the action parameter. The NVD notes a MEDIUM severity (CVSS v2: AV:N/A...