Cross-site scripting (XSS) vulnerability in ShowPost.asp in BBSXP 2008 allows remote malicious users to inject arbitrary web script or HTML via the ThreadID parameter.
bbsxp bbsxp 2008