CVE-2006-1270

Multiple cross-site scripting (XSS) vulnerabilities affect zones.php in Inprotect 0.21, enabling remote attackers to inject arbitrary web script or HTML via the Name or Description fields. The underlying issue is an input handling flaw in zones.php, leading to client-side script execution if unes...