Cross site scripting

Cross-site scripting XSS vulnerability in genmessage.php in Accounting Receiving and Inventory Administration ARIA 0.99-6 allows remote attackers to inject arbitrary web script or HTML via the Message Field message parameter...

CVE-2006-1435

This CVE (CVE-2006-1435) covers a Cross-site Scripting (XSS) flaw in the Accounting Receiving and Inventory Administration (ARIA) 0.99-6, where the genmessage.php script processes the Message Field. The underlying issue is improper sanitization of user-supplied input, allowing an attacker to inje...