CVE-2010-4811

CVE-2010-4811 concerns multiple cross-site scripting (XSS) vulnerabilities in the 6kbbs 8.0 build 20100901 package, specifically in ajaxmember.php. The flaws allow remote attackers to inject arbitrary web script or HTML by manipulating the parameters user[msn], user[email], and user[phone] in a m...