CVE-2006-6892

Cross-site scripting XSS vulnerability in the GetLocation function in online.php in Jonathon J. Freeman OvBB 0.13a allows remote attackers to inject arbitrary web script or HTML via the aRequest variable...

CVE-2006-6892

The CVE-2006-6892 entry concerns OvBB 0.13a (Jonathon J. Freeman) with an XSS flaw in GetLocation() in online.php. The issue allows remote attackers to inject arbitrary script/HTML via the aRequest parameter, enabling client-side impact on affected pages. The vulnerability is caused by improper h...