CVE-2006-3609

CVE-2006-3609 describes a cross-site scripting (XSS) vulnerability in Orbitcoders OrbitMATRIX 1.0, specifically in index.php where the page_name parameter can be exploited to inject arbitrary script/HTML via an IMG tag whose SRC contains a javascript: URI. Affected component is OrbitMATRIX 1.0’s ...