CVE-2006-3246
Cross-site scripting (XSS) vulnerability in show.php in GL-SH Deaf Forum 6.4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the sort parameter.
Date published : 2006-06-27
http://www.securityfocus.com/bid/18651
http://pridels0.blogspot.com/2006/06/gl-sh-deaf-forum-xss-vuln.html