YaBB 1 - Invalid Topic Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/5078/info It is reported possible for attackers to construct a URL that will cause scripting code to be embedded in error pages. YaBB fails to check URLs for the presence of script commands when generating error pages, allowing attacker supplied code to...