CVE-2008-6891

The provided text describes an SQL injection and XSS vulnerability in ASP Forum Script, with an example XSS payload. No actual exploit code is present, only a description and a sample attack URL.

The exploit demonstrates an XSS vulnerability in ASP Forum Script by injecting a malicious script tag into the 'forum_id' parameter. It also mentions SQL injection vulnerabilities but does not provide a PoC for them.

This exploit demonstrates an XSS vulnerability in ASP Forum Script by injecting a script tag into the URL parameter. It also mentions SQL injection vulnerabilities but does not provide a PoC for them.