info
discussion
exploit
solution
references
SMF Index.PHP HTML Injection Vulnerability
Attackers can exploit this issue via a web client.
An example URI has been provided:
http://www.example.com/smf/index.php?action=pm;sa=send
Privacy Statement
Copyright 2010, SecurityFocus