CVE-2006-0084

CVE-2006-0084 describes a cross-site scripting vulnerability in raSMP 2.0.0 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML through the User-Agent header ($_SERVER[HTTP_USER_AGENT]). Metrics indicate no confidentiality impact, partial integrity impact, and no ...