Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field.
- http://evuln.com/vulns/86/summary.html
- http://securityreason.com/securityalert/545
No PoCs found on GitHub currently.