CVE-2006-3956

AWBS 2.2.2 contains multiple cross-site scripting (XSS) vulnerabilities in contact.php that allow remote injection of arbitrary script/HTML via the Name, AccountUsername, and Message parameters. The issue is described as XSS in AWBS 2.2.2; no further technical details (such as exact root cause, a...