CVE-2006-3247

CVE-2006-3247 describes multiple cross-site scripting (XSS) vulnerabilities in the GL-SH Deaf Forum’s show.php (versions 6.4.3 and earlier). The flaws allow remote attackers to inject arbitrary script/HTML via the (1) search, (2) page, and (3) action parameters. The NVD entry lists a low base CVS...