CVE-2004-2510
Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to inject arbitrary web script or HTML via the Cat parameter.
Date published : 2005-10-25
http://www.securityfocus.com/bid/11900
http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html