CVE-2006-2975

CVE-2006-2975 affects PBL Guestbook 1.31 (pblguestbook.php). It describes multiple XSS vectors where an attacker can inject arbitrary script/HTML via javascript in the SRC attribute of IMG tags for the name, email, and website parameters. The scheme bypasses protections that only filter SCRIPT ta...