CVE-2002-1853

The connected records confirm a cross-site scripting (XSS) vulnerability affecting MyNewsGroups 0.4 and 0.4.1. The issue arises from improper handling of the post subject in multiple scripts (myarticles.php, search.php, stats.php, and standard.lib.php), enabling a remote attacker to inject arbitr...