EUVD-2006-2228

Malware in sbrugna...

CVE-2006-2227: Undefined Security Weakness

Cross-site scripting XSS vulnerability in misc.php in PunBB 1.2.11 allows remote attackers to inject arbitrary web script or HTML via the reqmessage parameter, because the value of the redirecturl parameter is not sanitized...