CVE-2006-4894

CVE-2006-4894 is an XSS vulnerability in iDevSpot NixieAffiliate (versions 1.9 and earlier), where an attacker can inject arbitrary script via the error parameter in forms/lostpassword.php. The CVE indicates a network-vector, with no authentication required and partial integrity impact. Affected:...