Security Advisory
CVE-2006-0156
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Cross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in bbcode url tags in (1) addpost1.php and (2) addtopic1.php.