CVE-2006-0593

PHP-Fusion contains a cross-site scripting (XSS) vulnerability (CVE-2006-0593) in version prior to 6.00.304. The flaw allows remote attackers to inject arbitrary web script or HTML through two fields: shout_name in shoutbox_panel.php and comments in comments_include.php. Impact per the sources is...

CVE-2006-0593: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the 1 shoutname field in shoutboxpanel.php and the 2 comments field in commentsinclude.php...