|
PBLang Bulletin Board System Multiple HTML Injection Vulnerabilities
No exploit is required. Examples of input sufficient to exploit these issues: Input to the "URL" field: '';!--"<script>alert(String.fromCharCode(88,83,83)); </script> Input to the email field: dude@what.com'';!--"<mycode> |
|
Privacy Statement |