CVE-2006-1590

CVE-2006-1590 is an XSS vulnerability in BASE 1.2.4 and ACID 0.9.6b23 (PrintFreshPage function). The issue allows remote attackers to inject arbitrary script/HTML via: (a) back parameter to base_graph_main.php, (b) netmask parameter to base_stat_ipaddr.php, (c) submit parameter to base_qry_alert....