CVE-2013-5020: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in bbadmin.php in MiniBB before 3.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 forumname, 2 forumgroup, 3 forumicon, or 4 forumdesc parameter. NOTE: the whatus vector is already covered by CVE-2008-2066...

CVE-2006-6348: Undefined Security Weakness

Cross-site scripting XSS vulnerability in board.php in mowdBB RC-6 allows remote attackers to inject arbitrary web script or HTML via the forumname parameter...