CVE-2006-3246

Cross-site scripting XSS vulnerability in show.php in GL-SH Deaf Forum 6.4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the sort parameter...

CVE-2006-3247

CVE-2006-3247 describes multiple cross-site scripting (XSS) vulnerabilities in the GL-SH Deaf Forum’s show.php (versions 6.4.3 and earlier). The flaws allow remote attackers to inject arbitrary script/HTML via the (1) search, (2) page, and (3) action parameters. The NVD entry lists a low base CVS...

CVE-2006-3247

Multiple cross-site scripting XSS vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 page, and 3 action parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2006-3246

CVE-2006-3246 describes a stored/reflected XSS in GL-SH Deaf Forum 6.4.3 and earlier, exploitable via the sort parameter in show.php. Impact: attacker can inject arbitrary script/HTML. Root cause: insufficient input sanitization for the sort parameter. Public remediation details are not provided ...