Cross-site scripting (XSS) vulnerability in forum_search.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/26929http://colander.altervista.org/advisory/ASPDisc.txthttp://www.securityfocus.com/bid/18237http://secunia.com/advisories/20425http://www.vupen.com/english/advisories/2006/2113