Code injection

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie...