CVE-2006-1496

CVE-2006-1496 describes multiple cross-site scripting (XSS) vulnerabilities in ViHor Design’s index.php. The vulnerability arises from the vulnerable page parameter being used in two ways: (1) as a remote URL supplied to fopen, and (2) as HTML or script content that is echoed back to the client i...