CVE-2008-6977

CVE-2008-6977 is an XSS vulnerability in Full Revolution aspWebAlbum 3.2, affecting album.asp where a crafted message parameter in a summary action can inject arbitrary script/HTML. The base metrics show a MEDIUM severity with network access, no authentication, and partial integrity impact. The d...