CVE-2006-3038

The CVE-2006-3038 issue affects Cescripts Realty Room Rent (index.php) where XSS is possible through the sel_menu parameter. The underlying flaw is improper sanitization of user input, enabling injection of arbitrary script/HTML. The NVD entry notes the vendor acknowledged the issues and addresse...

CVE-2006-3039: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Cescripts Realty Home Rent allows remote attackers to inject arbitrary web script or HTML via the selmenu parameter. NOTE: the vendor notified CVE on 20060823 that "All issues concerning this script and others at cescripts.com have been...

CVE-2006-3038: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Cescripts Realty Room Rent allows remote attackers to inject arbitrary web script or HTML via the selmenu parameter. NOTE: the vendor notified CVE on 20060823 that "All issues concerning this script and others at cescripts.com have been...