CVE-2005-1684

The CVE-2005-1684 entry concerns Episodex Guestbook (ASP) where the default.asp input validation flaw enables cross-site scripting via the Name field (and other fields). Multiple connected sources (OpenVAS/Nessus/NVD) confirm: remote, unauthenticated attackers can inject arbitrary HTML/script and...