CVE-2005-3260: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in versatileBulletinBoard vBB 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via 1 the url parameter in dereferrer.php and 2 the file parameter in imagewin.php...