Private Message System index.php Page Parameter Cross-Site Scripting Vulnerability

Bugtraq ID:	9308
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 27 2003 12:00AM
Updated:	Dec 27 2003 12:00AM
Credit:	Discovery is credited to David S. Ferreira.
Vulnerable:	Private Message System Private Message System 2.2.8 Private Message System Private Message System 2.2.7 Private Message System Private Message System 2.2.6 Private Message System Private Message System 2.2.5 Private Message System Private Message System 2.2.4 Private Message System Private Message System 2.2.3 Private Message System Private Message System 2.2.2 Private Message System Private Message System 2.2.1 -PR1 Private Message System Private Message System 2.2.1 Private Message System Private Message System 2.1.1 Private Message System Private Message System 2.1 .0 beta Private Message System Private Message System 2.0.5 Private Message System Private Message System 2.0.4

Not Vulnerable:	Private Message System Private Message System 2.3 .0