CVE-2006-4038

The CVE-2006-4038 entry applies to GaesteChaos before and including 0.2, where the web application eintragen.php is vulnerable to cross-site scripting. The underlying issue is input handling for the gastname and gastwohnort parameters, which can be crafted to inject arbitrary web script/HTML. The...