2 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the pg parameter, a different vector than CVE-2005-4597...
CVE-2005-4597
CVE-2005-4597: XSS in iPei Guestbook 1.7 (index.php) allowing remote attackers to inject arbitrary script/HTML via the email parameter when signing the guestbook. Root cause is reflected/scriptable output in the email field; affects iPei Guestbook 1.7. No remediation details provided in the suppl...