CVE-2005-4879: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in jaxguestbook.php in Jax Guestbook 3.1 and 3.31 allow remote attackers to inject arbitrary web script or HTML via the 1 gmtofs and 2 language parameters. NOTE: the page parameter is already covered by CVE-2006-1913. NOTE: it was later reported...

CVE-2006-1913: Undefined Security Weakness

Cross-site scripting XSS vulnerability in jaxguestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attackers to inject arbitrary web script or HTML via the page parameter...