CVE-2006-0136

Phanatic Software’s Chimera Web Portal System 0.2 is affected by multiple cross-site scripting (XSS) vulnerabilities in the guestbook module (modules.php). The flaw allows remote attackers to inject arbitrary script or HTML via the comment_poster, comment_poster_email, comment_poster_homepage, or...