CVE-2006-2764

Cross-site scripting XSS vulnerability in GuestbookXL 1.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an IMG tag in a comment field to 1 guestwrite.php or 2 guestbook.php...

CVE-2006-2764

CVE-2006-2764 affects GuestbookXL 1.3 with a cross-site scripting (XSS) flaw. An attacker can inject arbitrary script/HTML by using a javascript: URI in an IMG tag within a comment field, targeting guestwrite.php or guestbook.php. This is the explicit vulnerability described in multiple sources (...

CVE-2006-2764

Cross-site scripting XSS vulnerability in GuestbookXL 1.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an IMG tag in a comment field to 1 guestwrite.php or 2 guestbook.php...