CVE-2008-0775

CVE-2008-0775 describes an XSS vulnerability in the SMF Shoutbox (versions 1.14–1.16b) where input to the shoutbox form that begins with "&#" and ends with ";" can inject arbitrary script/HTML. The root cause is insufficient input sanitization in sboxDB.php, allowing remote attackers to execute s...