Cross site scripting

Cross-site scripting XSS vulnerability in 1 addWeblog.php and 2 leaveComments.php in Destiney Rated Images Script 0.5.0 does not properly filter all vulnerable HTML tags, which allows remote attackers to inject arbitrary web script or HTML via Javascript in a DIV tag...

CVE-2006-2533

This CVE concerns Destiney Rated Images Script 0.5.0. The vulnerability is a Cross-site scripting (XSS) flaw in (1) addWeblog.php and (2) leaveComments.php caused by inadequate filtering of HTML tags, allowing remote attackers to inject arbitrary web script or HTML via Javascript in a DIV tag. Im...