CVE-2006-2892

CVE-2006-2892 is an XSS vulnerability in GANTTy 1.0.3, where the index.php login action accepts a message parameter that can be exploited to inject arbitrary HTML/JavaScript. The entry lists a CVSS v2 base score of 4.3 (Medium) with network attack vector, no confidentiality/availability impact, p...