CVE-2012-2643

Cross-site scripting XSS vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted form entry...

CVE-2012-2643

CVE-2012-2643 affects YY-BOARD by KENT-WEB: an XSS vulnerability exists in handling web form entries, exploitable through a crafted form input to execute arbitrary script/HTML in a user’s browser. The issue is described as occurring in YY-BOARD prior to version 6.4 and is due to improper handling...