CVE-2006-1373

CVE-2006-1373 affects PHP Live! 3.0, specifically status_image.php, where the base_url parameter is not properly sanitized, enabling cross-site scripting (XSS). The underlying issue is insufficient input sanitization, allowing an attacker to inject arbitrary script to run in a user’s browser and ...