CVE-2007-5218: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Don Barnes DRBGuestbook 1.1.13 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2007-5218

CVE-2007-5218 describes a cross-site scripting (XSS) vulnerability in the PHP-based “DRBGuestbook” software, specifically in index.php of version 1.1.13 by Don Barnes. The issue allows remote attackers to inject arbitrary web script or HTML via the action parameter. The provided documents do not ...