CVE-2004-2122

CVE-2004-2122 describes a cross-site scripting (XSS) vulnerability in Intra Forum’s intraforum_db.cgi, exploitable via the use_last_read or forum parameters. Affected software/function: Intra Forum web application (intraforum_db.cgi). Root cause: unsanitized input leading to script/HTML injection...

CVE-2004-2122: Undefined Security Weakness

Cross-site scripting XSS vulnerability in intraforumdb.cgi in Intra Forum allows remote attackers to inject arbitrary web script or HTML via the 1 uselastread or 2 forum parameters...