EUVD-2006-1243

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in issue/createissue.aspx in Gemini 2.0 allows remote attackers to inject arbitrary web script or HTML via the rtcDescription$RadEditor1 field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1239

The CVE-2006-1239 entry describes a Cross-site scripting (XSS) vulnerability in Gemini 2.0, specifically in issue/createissue.aspx where an attacker can inject arbitrary script via the rtcDescription$RadEditor1 field. The issue is confirmed by NVD data with a CVSSv2 base score of 4.3 (MEDIUM) and...