CVE-2006-3143

Cross-site scripting XSS vulnerability in icuelogin.asp in Maximus SchoolMAX 4.0.1 and earlier iCue and iParent applications allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter...

CVE-2006-3143

The CVE CVE-2006-3143 affects Maximus SchoolMAX 4.0.1 and earlier iCue/iParent applications, where the icue_login.asp page is vulnerable to reflected cross-site scripting via the error_msg parameter. The underlying issue is improper handling of user-supplied input, allowing an attacker to inject ...