CVE-2006-3079

Summary: CVE-2006-3079 describes a Cross-site scripting (XSS) vulnerability in the SSPwiz Plus product, specifically in index.cfm for version 1.0.7 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the message parameter. The published metrics indicate a Med...