CVE-2006-4324

CityForFree indexcity 1.0 has an XSS vulnerability in add_url2.php exploitable via the url parameter. The underlying issue is insufficient input sanitization, allowing remote attackers to inject arbitrary web script or HTML. Affected software/version: indexcity 1.0 (add_url2.php). Impact: client-...