|
SkyeShoutbox <= v.1.2.0 XSS=0D
=0D
Discovered by: Nomenumbra=0D
Date: 21/5/2006=0D
impact:moderate (possible defacement)=0D
=0D
SkyeShoutbox doesn't filter any input at all, thus =0D
allowing attackers to inject arbitrary html or javascript.=0D
=0D
Nomenumbra