CVE-2006-6278

CVE-2006-6278 is a cross-site scripting (XSS) vulnerability in the index.php of @lex Guestbook 4.0.1 , exploitable via the skin parameter to inject arbitrary web script or HTML. Affected software: @lex Guestbook 4.0.1 (index.php). The documents confirm the vulnerability and payload type but do no...